Skip to content
OpenAdvisories
Critical 1 exploited CVE RLSA-2026:74084 322 CVEs

Critical: webkit2gtk3 security update

Published Oct 1, 2026 · Updated Oct 1, 2026

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)

* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)

* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)

* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)

* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)

* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)

* chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)

* chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)

* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)

* chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)

* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)

* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-4464)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-4452)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)

* chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-5277)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868)

* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-7340)

* chromium-browser: Use after free in ANGLE (CVE-2026-7359)

* chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354)

* chromium-browser: Use after free in ANGLE (CVE-2026-7901)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-7903)

* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)

* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)

* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)

* chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)

* chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)

* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)

* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)

* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9915)

* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)

* chromium-browser: Use after free in ANGLE (CVE-2026-9932)

* chromium-browser: Use after free in ANGLE (CVE-2026-9904)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-10018)

* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9879)

* chromium-browser: Use after free in ANGLE (CVE-2026-9899)

* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9940)

* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)

* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9965)

* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)

* chromium-browser: Use after free in ANGLE (CVE-2026-9877)

* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)

* chromium-browser: Use after free in ANGLE (CVE-2026-9946)

* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)

* chromium-browser: Integer overflow in ANGLE (CVE-2026-9882)

* chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-9910)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)

* chromium-browser: Out of bounds read in ANGLE (CVE-2026-9908)

* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)

* chromium-browser: Uninitialized Use in A

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 webkit2gtk3 0:2.54.0-1.el8_10

Vulnerabilities 322

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298302
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2303272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2307088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2308415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2308417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2311665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2314571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2338161
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2343797
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2388151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2391109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2397874
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2444613
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2444617
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2446868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2447195
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2449382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2449388
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2449406
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2449412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2453681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2453693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2453696
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2456737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2456779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2456802
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458786
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458798
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2463657
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2463664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2463670
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2463691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467315
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467316
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467362