Red Hat Security Advisory: webkitgtk4 security, bug fix, and enhancement update

Fixed packages 6

Vulnerabilities 11

• Critical 9.6
  CVE-2026-87500

  Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potent…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Critical 9.6
  CVE-2026-87512

  Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbi…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Critical 9.6
  CVE-2026-87621

  Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potenti…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Critical 9.6
  CVE-2026-87654

  Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arb…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Critical 9.6
  CVE-2026-91738

  Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially exe…

  Google Chrome chromium Browsers Debian
  Sep 15, 2026
• High 8.3
  CVE-2026-87604

  Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the r…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• High 8.3
  CVE-2026-87648

  Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had comprom…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Medium 4.7
  CVE-2026-87602

  Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentia…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Medium 4.7
  CVE-2026-91720

  Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outsid…

  Google Chrome chromium Browsers Debian
  Sep 15, 2026
• Medium 4.3
  CVE-2026-87586

  Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside th…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026
• Medium 4.3
  CVE-2026-87596

  Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside th…

  Google Chrome chromium Browsers Debian
  Sep 9, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530272
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530296
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530305
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530333
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530389
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530396
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530447
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530458
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2530475
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2534404
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2534673
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98781.json
• report
  https://access.redhat.com/security/cve/CVE-2026-87500
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-87500
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-87500
• article
  https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
• article
  https://issues.chromium.org/issues/540019091
• report
  https://access.redhat.com/security/cve/CVE-2026-87512
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-87512
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-87512
• article
  https://issues.chromium.org/issues/541715128
• report
  https://access.redhat.com/security/cve/CVE-2026-87586
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-87586
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-87586
• article
  https://issues.chromium.org/issues/536598187
• report
  https://access.redhat.com/security/cve/CVE-2026-87596
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-87596
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-87596
• article
  https://issues.chromium.org/issues/536434693
• report
  https://access.redhat.com/security/cve/CVE-2026-87602
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-87602
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-87602
• article
  https://issues.chromium.org/issues/541546782
• report
  https://access.redhat.com/security/cve/CVE-2026-87604
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-87604
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-87604
• article
  https://issues.chromium.org/issues/536648007
• report
  https://access.redhat.com/security/cve/CVE-2026-87621