Red Hat Security Advisory: webkitgtk4 security update

Fixed packages 6

Vulnerabilities 18

• High 7.5
  CVE-2026-20652

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• Medium 6.5
  CVE-2025-43213

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 6.5
  CVE-2025-43214

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2025
• Medium 6.5
  CVE-2025-43457

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 6.5
  CVE-2025-43511

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Dec 12, 2025
• Medium 6.5
  CVE-2026-20636

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, ma…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• Medium 6.5
  CVE-2026-20644

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• Medium 6.5
  CVE-2026-20665

  This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Mar 25, 2026
• Medium 6.5
  CVE-2026-28857

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Mar 25, 2026
• Medium 5.5
  CVE-2026-20608

  This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 1…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• Medium 5.4
  CVE-2026-20643 Public exploit

  A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgro…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Mar 17, 2026
• Medium 4.3
  CVE-2025-46299

  A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jan 9, 2026
• Medium 4.3
  CVE-2026-20635

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• Medium 4.3
  CVE-2026-20664

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Mar 25, 2026
• Medium 4.3
  CVE-2026-20676

  This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• Medium 4.3
  CVE-2026-20691

  An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Mar 25, 2026
• Medium 4.3
  CVE-2026-28859

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Mar 25, 2026
• Medium 4.3
  CVE-2026-28871

  A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Mar 25, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448787
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448788
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448789
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448790
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448791
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448792
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448794
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453001
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453003
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453004
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453006
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453008
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22136.json
• report
  https://access.redhat.com/security/cve/CVE-2025-43213
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43213
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43213
• article
  https://webkitgtk.org/security/WSA-2026-0001.html
• report
  https://access.redhat.com/security/cve/CVE-2025-43214
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43214
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43214
• report
  https://access.redhat.com/security/cve/CVE-2025-43457
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43457
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43457
• report
  https://access.redhat.com/security/cve/CVE-2025-43511
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43511
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43511
• report
  https://access.redhat.com/security/cve/CVE-2025-46299
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46299
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46299
• report
  https://access.redhat.com/security/cve/CVE-2026-20608
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-20608
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-20608