Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 27

Vulnerabilities 7

• High 8.8
  CVE-2025-14174 Exploited Public exploit EPSS 43%

  Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfo…

  Google Chrome chromium qtwebkit-source Browsers Debian Ubuntu Alpine Wolfi
  Dec 12, 2025

  KEV Dec 12, 2025
• High 8.8
  CVE-2025-43529 Exploited Public exploit EPSS 26%

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Dec 17, 2025

  KEV Dec 15, 2025
• Medium 4.3
  CVE-2025-43501

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Dec 17, 2025
• Medium 4.3
  CVE-2025-43535

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Dec 17, 2025
• Medium 4.3
  CVE-2025-43536

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Dec 17, 2025
• Medium 4.3
  CVE-2025-43541 Public exploit EPSS 34%

  A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and i…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Dec 17, 2025
• Low 3.1
  CVE-2025-43531

  A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Dec 17, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423185
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423188
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423190
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2423191
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23968.json
• report
  https://access.redhat.com/security/cve/CVE-2025-14174
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2421824
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-14174
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-14174
• article
  https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html
• article
  https://issues.chromium.org/issues/466192044
• article
  https://webkitgtk.org/security/WSA-2025-0010.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2025-43501
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43501
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43501
• report
  https://access.redhat.com/security/cve/CVE-2025-43529
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43529
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43529
• report
  https://access.redhat.com/security/cve/CVE-2025-43531
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43531
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43531
• report
  https://access.redhat.com/security/cve/CVE-2025-43535
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43535
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43535
• report
  https://access.redhat.com/security/cve/CVE-2025-43536
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43536
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43536
• report
  https://access.redhat.com/security/cve/CVE-2025-43541
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43541
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43541