RHSA-2026:28147 — Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-debuginfo	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-debugsource	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-devel	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-devel-debuginfo	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-jsc	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-jsc-debuginfo	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-jsc-devel	0:2.52.4-1.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.52.4-1.el9_6

Vulnerabilities 17

High 8.8

CVE-2026-28847

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 8.8

CVE-2026-28947

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 a…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 8.8

CVE-2026-28955

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 8.1

CVE-2026-28907

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 7.5

CVE-2026-28883

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 7.5

CVE-2026-28904

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 7.5

CVE-2026-28905

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, ma…

Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 7.5

CVE-2026-28953

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 7.5

CVE-2026-43658

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
High 7.5

CVE-2026-43660

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9,…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
Medium 6.5

CVE-2026-28902

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
Medium 6.5

CVE-2026-28903

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
Medium 6.5

CVE-2026-28942

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
Medium 6.5

CVE-2026-28946

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 2…

Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu

May 11, 2026
Medium 5.5

CVE-2026-28958

This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
Medium 4.3

CVE-2026-28901

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 11, 2026
Medium 4.3

CVE-2026-28984

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Aug 17, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2471790
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483955
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483956
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483957
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483958
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483959
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483960
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483961
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483962
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483963
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483964
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483965
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483966
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483967
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483968
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483969
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28147.json
report
https://access.redhat.com/security/cve/CVE-2026-28847
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28847
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28847
article
https://webkitgtk.org/security/WSA-2026-0003.html
report
https://access.redhat.com/security/cve/CVE-2026-28883
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28883
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28883
report
https://access.redhat.com/security/cve/CVE-2026-28901
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28901
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28901
report
https://access.redhat.com/security/cve/CVE-2026-28902
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28902
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28902
report
https://access.redhat.com/security/cve/CVE-2026-28903
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28903
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28903
report
https://access.redhat.com/security/cve/CVE-2026-28904
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28904
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28904
report
https://access.redhat.com/security/cve/CVE-2026-28905
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28905

Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 17

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 a…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and …

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.…

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9,…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and …

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 2…

This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.…

References