Summary
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
* webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | webkit2gtk3 | 2.50.0-1.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-devel | 2.50.0-1.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-jsc | 2.50.0-1.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-jsc-devel | 2.50.0-1.el8_10 |
Vulnerabilities 7
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…
KEV Mar 20, 2026 -
Critical 9.8
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…
-
High 8.0
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequo…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…
-
Medium 6.5
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, i…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPad…
References
-
report
https://access.redhat.com/security/cve/CVE-2025-43272
-
report
https://access.redhat.com/security/cve/CVE-2025-43342
-
report
https://access.redhat.com/security/cve/CVE-2025-43356
-
report
https://access.redhat.com/security/cve/CVE-2025-43368
-
report
https://bugzilla.redhat.com/2397626
-
report
https://bugzilla.redhat.com/2397627
-
report
https://bugzilla.redhat.com/2397628
-
report
https://bugzilla.redhat.com/2397630
-
advisory
https://errata.almalinux.org/8/ALSA-2025-17802.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-31223.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-31277.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-43419.html