High DSA-6074-1 4 CVEs

webkit2gtk - security update

Published Dec 9, 2025 · Updated Dec 9, 2025

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	webkit2gtk	2.50.3-1~deb12u1
Debian · 13	webkit2gtk	2.50.3-1~deb13u1

Vulnerabilities 4

High 8.8

CVE-2025-66287

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Dec 4, 2025
High 7.4

CVE-2025-13947 Public exploit

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations orig…

Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Dec 3, 2025
Medium 4.3

CVE-2025-43421

Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and …

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43458

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025