Skip to content
OpenAdvisories
Critical 1 exploited CVE ALSA-2026:74084 322 CVEs

Critical: webkit2gtk3 security update

Published Sep 30, 2026 · Updated Nov 6, 2026

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
* chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
* chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
* chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-4464)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-4452)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448)
* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
* chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-5277)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868)
* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)
* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296)
* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-7340)
* chromium-browser: Use after free in ANGLE (CVE-2026-7359)
* chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354)
* chromium-browser: Use after free in ANGLE (CVE-2026-7901)
* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-7903)
* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900)
* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)
* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)
* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
* chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)
* chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)
* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)
* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)
* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)
* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)
* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)
* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9915)
* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)
* chromium-browser: Use after free in ANGLE (CVE-2026-9932)
* chromium-browser: Use after free in ANGLE (CVE-2026-9904)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-10018)
* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9879)
* chromium-browser: Use after free in ANGLE (CVE-2026-9899)
* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9940)
* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)
* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9965)
* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)
* chromium-browser: Use after free in ANGLE (CVE-2026-9877)
* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)
* chromium-browser: Use after free in ANGLE (CVE-2026-9946)
* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)
* chromium-browser: Integer overflow in ANGLE (CVE-2026-9882)
* chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-9910)
* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)
* chromium-browser: Out of bounds read in ANGLE (CVE-2026-9908)
* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)
* chromium-browser: skia: chromium-browser: skia: Use af

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 webkit2gtk3 2.54.0-1.el8_10
AlmaLinux · 8 webkit2gtk3-devel 2.54.0-1.el8_10
AlmaLinux · 8 webkit2gtk3-jsc 2.54.0-1.el8_10
AlmaLinux · 8 webkit2gtk3-jsc-devel 2.54.0-1.el8_10

Vulnerabilities 322

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-4860
  • report
    https://access.redhat.com/security/cve/CVE-2024-7532
  • report
    https://access.redhat.com/security/cve/CVE-2024-7966
  • report
    https://access.redhat.com/security/cve/CVE-2024-8193
  • report
    https://access.redhat.com/security/cve/CVE-2024-8198
  • report
    https://access.redhat.com/security/cve/CVE-2024-8636
  • report
    https://access.redhat.com/security/cve/CVE-2024-9123
  • report
    https://access.redhat.com/security/cve/CVE-2025-0436
  • report
    https://access.redhat.com/security/cve/CVE-2025-0444
  • report
    https://access.redhat.com/security/cve/CVE-2025-10502
  • report
    https://access.redhat.com/security/cve/CVE-2025-8901
  • report
    https://access.redhat.com/security/cve/CVE-2025-9478
  • report
    https://access.redhat.com/security/cve/CVE-2026-0908
  • report
    https://access.redhat.com/security/cve/CVE-2026-10009
  • report
    https://access.redhat.com/security/cve/CVE-2026-10011
  • report
    https://access.redhat.com/security/cve/CVE-2026-10012
  • report
    https://access.redhat.com/security/cve/CVE-2026-10018
  • report
    https://access.redhat.com/security/cve/CVE-2026-10019
  • report
    https://access.redhat.com/security/cve/CVE-2026-10020
  • report
    https://access.redhat.com/security/cve/CVE-2026-10881
  • report
    https://access.redhat.com/security/cve/CVE-2026-10883
  • report
    https://access.redhat.com/security/cve/CVE-2026-10889
  • report
    https://access.redhat.com/security/cve/CVE-2026-10907
  • report
    https://access.redhat.com/security/cve/CVE-2026-10913
  • report
    https://access.redhat.com/security/cve/CVE-2026-10914
  • report
    https://access.redhat.com/security/cve/CVE-2026-10919
  • report
    https://access.redhat.com/security/cve/CVE-2026-10925
  • report
    https://access.redhat.com/security/cve/CVE-2026-10929
  • report
    https://access.redhat.com/security/cve/CVE-2026-10930
  • report
    https://access.redhat.com/security/cve/CVE-2026-10941
  • report
    https://access.redhat.com/security/cve/CVE-2026-10955
  • report
    https://access.redhat.com/security/cve/CVE-2026-10974
  • report
    https://access.redhat.com/security/cve/CVE-2026-10977
  • report
    https://access.redhat.com/security/cve/CVE-2026-10979
  • report
    https://access.redhat.com/security/cve/CVE-2026-10985
  • report
    https://access.redhat.com/security/cve/CVE-2026-10993
  • report
    https://access.redhat.com/security/cve/CVE-2026-10994
  • report
    https://access.redhat.com/security/cve/CVE-2026-10999
  • report
    https://access.redhat.com/security/cve/CVE-2026-11004