Read the docs
Red Hat Security Advisory

RHSA-2026:91636

webkit2gtk3 security update

Released 2026-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 14 records

TI-2026-63560 CVE-2026-95331 · GHSA-8pjp-qxrq-28v8

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00338 Published 2026-09-29 Partial fix · 154.0.8037.57 CWE-787
TI-2026-63554 CVE-2026-95325 · GHSA-365g-qr8c-6v6r

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00345 Published 2026-09-29 Partial fix · 154.0.8037.57 CWE-416
Priority MEDIUM 40

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00403 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-908
Priority MEDIUM 40

Buffer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00467 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-122
Priority MEDIUM 40

Integer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00427 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-190
Priority MEDIUM 40

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0038 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-908
Priority MEDIUM 40

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00368 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-908
Priority MEDIUM 40

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00388 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-908
Priority LOW 38

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0037 Published 2026-10-20 Partial fix · 156.0.8078.47 CWE-908
Priority LOW 38

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00323 Published 2026-10-06 Partial fix · 155.0.8059.39 CWE-843
TI-2026-68711 CVE-2026-106247 · GHSA-q4w2-cc5m-42vg

Buffer overflow in ANGLE in Google Chrome

Priority LOW 38

Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00339 Published 2026-10-06 Partial fix · 155.0.8059.39 CWE-122
Priority LOW 21

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00202 Published 2026-10-06 Partial fix · 155.0.8059.39 CWE-125
Priority LOW 19

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00224 Published 2026-10-27 Partial fix · 156.0.8078.73 CWE-908
Priority LOW 19

Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0022 Published 2026-10-06 Partial fix · 155.0.8059.39 CWE-908