Read the docs
Red Hat Security Advisory

RHSA-2026:57348

webkit2gtk3 security update

Released 2026-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 24 records

TI-2024-04069 CVE-2024-4367 · GHSA-wgrm-67xf-hhpq

Improper check for unusual conditions in Mozilla Firefox

Priority HIGH 78

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.7066 Published 2024-05-14 Partial fix · 126, 115.11 +1 CWE-754
TI-2026-31807 CVE-2026-43715 · GHSA-rvhg-xh7h-fp5g

Use after free in Apple Safari

Priority MEDIUM 43

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01257 Published 2026-06-29 Partial fix · 26.5.2, 26.7 +1 CWE-416
TI-2026-31823 CVE-2026-43731 · GHSA-mrq3-x9xw-5cqm

Use after free in Apple Safari

Priority MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00405 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31797 CVE-2026-43705 · GHSA-pxxj-mgr3-jp7c

Type confusion in Apple Safari

Priority MEDIUM 40

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00422 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-843
TI-2026-31817 CVE-2026-43725 · GHSA-qxph-q4j6-rfqr

Improper input validation in Apple Safari

Priority LOW 33

The issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00912 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-20
TI-2026-31793 CVE-2026-43701 · GHSA-779r-mf4g-rgf7

Improper access control in Apple Safari

Priority LOW 32

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00551 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-284
TI-2026-31836 CVE-2026-43745 · GHSA-jwf6-8r5m-99c4

Out-of-bounds write in Apple Safari

Priority LOW 30

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00679 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-787
TI-2026-31812 CVE-2026-43720 · GHSA-wvfc-f72q-gqc3

Use after free in Apple Safari

Priority LOW 30

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0066 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31808 CVE-2026-43716 · GHSA-qr57-p9qq-f4x8

Memory corruption in Apple Safari

Priority LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00598 Published 2026-06-29 Partial fix · 26.5.2 CWE-119
TI-2026-31799 CVE-2026-43707 · GHSA-fpv3-789h-j3j4

Memory corruption in Apple Safari

Priority LOW 30

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00686 Published 2026-06-29 Partial fix · 26.5.2, 26.6 CWE-119
TI-2026-46318 CVE-2026-64787 · GHSA-p984-67jc-vc4w

Use after free in Apple Safari

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00333 Published 2026-08-17 Partial fix · 26.6.1, 18.7.10 +2 CWE-416
TI-2026-31833 CVE-2026-43742 · GHSA-vjvw-hpgr-cw8j

Use after free in Apple Safari

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00393 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31831 CVE-2026-43740 · GHSA-xxx6-g6jv-xq96

Memory corruption in Apple Safari

Priority LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00399 Published 2026-06-29 Partial fix · 26.5.2, 26.6 CWE-119
TI-2026-31826 CVE-2026-43734 · GHSA-44fm-8753-g4f8

Use after free in Apple Safari

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00393 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31824 CVE-2026-43732 · GHSA-pmqm-5gjj-gr9q

Path traversal in Apple Safari

Priority LOW 29

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0048 Published 2026-06-29 Partial fix · 26.5.2, 26.6 CWE-22
TI-2026-31819 CVE-2026-43727 · GHSA-7gjf-r94h-p24f

Use after free in Apple Safari

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0035 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31818 CVE-2026-43726 · GHSA-fq4m-7frw-qjqf

Use after free in Apple Safari

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00358 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31813 CVE-2026-43721 · GHSA-w4j5-xp5j-wg64

Incorrect permission assignment in Apple Safari

Priority LOW 29

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00437 Published 2026-06-29 Partial fix · 26.5.2, 26.6 CWE-732
TI-2026-31805 CVE-2026-43713 · GHSA-29hx-mf8v-qr9g

Improper access control in Apple Safari

Priority LOW 29

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00529 Published 2026-06-29 Partial fix · 26.5.2, 26.6 CWE-284
TI-2026-31804 CVE-2026-43712 · GHSA-ch2x-vqw2-2h28

Out-of-bounds read in Apple Safari

Priority LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00427 Published 2026-06-29 Partial fix · 26.5.2, 26.6 CWE-125
TI-2026-31791 CVE-2026-43699 · GHSA-v8m2-c626-7f74

Use after free in Apple Safari

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00393 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-416
TI-2026-31768 CVE-2026-43676 · GHSA-jrqp-jj3r-gr59

Out-of-bounds read in Apple Safari

Priority LOW 29

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00469 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-125
TI-2026-31758 CVE-2026-43663 · GHSA-h545-qxq5-vpjg

Memory corruption in Apple Safari

Priority LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00368 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-119
TI-2026-28752 CVE-2026-39872 · GHSA-3pf9-4p9r-8vcp

Memory corruption in Apple Safari

Priority LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00368 Published 2026-06-29 Partial fix · 26.5.2, 18.7.10 +1 CWE-119