RLSA-2026:98455 — Critical: webkit2gtk3 security, bug fix, and enhancement update

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)

* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)

* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)

* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)

* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)

* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)

* chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)

* chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)

* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)

* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)

* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)

* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-10977)

* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-10925)

* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia (CVE-2026-10941)

* chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia (CVE-2026-11099)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-11663)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11675)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-13841)

* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-13971)

* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-13820)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-13885)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-13781)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14414)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14389)

* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14387)

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-14410)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-14419)

* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14429)

* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-14427)

* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-15766)

* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-15774)

* chromium-bro

Fixed packages 45

Release	Package	Fixed in
Rocky Linux · 9	webkit2gtk3	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debugsource	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debugsource	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debugsource	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debugsource	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-debugsource	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel-debuginfo	0:2.54.2-2.el9_9
Rocky Linux · 9	webkit2gtk3-jsc-devel-debuginfo	0:2.54.2-2.el9_9

Vulnerabilities 92

Critical 9.6

CVE-2023-4860

Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromi…

Google Chrome chromium Browsers Debian

Jul 16, 2024
Critical 9.6

CVE-2026-118340

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data …

Google Chrome chromium libskia Browsers Debian

Oct 27, 2026
Critical 9.6

CVE-2026-119261

Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the rende…

Google Chrome chromium Browsers Debian

Oct 30, 2026
Critical 9.6

CVE-2026-13781

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh…

Google Chrome chromium webkit2gtk Browsers Debian Ubuntu

Jun 30, 2026
Critical 9.6

CVE-2026-14387

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a san…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
Critical 9.6

CVE-2026-14419

Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandb…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
High 8.8

CVE-2024-7966 Public exploit

Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromis…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Aug 21, 2024
High 8.8

CVE-2024-8193 Public exploit

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Aug 28, 2024
High 8.8

CVE-2024-8636 Public exploit

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit …

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Sep 11, 2024
High 8.8

CVE-2024-9123

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds …

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Sep 24, 2024
High 8.8

CVE-2025-0436

Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Jan 15, 2025
High 8.8

CVE-2026-10941

Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitr…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
High 8.8

CVE-2026-11024

Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit …

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
High 8.8

CVE-2026-11124

Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
High 8.8

CVE-2026-113106

Type confusion in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the render…

Google Chrome chromium libskia Browsers Debian Ubuntu

Oct 20, 2026
High 8.8

CVE-2026-118348

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit…

Google Chrome chromium libskia Browsers Debian

Oct 27, 2026
High 8.8

CVE-2026-118351

Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outs…

Google Chrome chromium libskia Browsers Debian

Oct 27, 2026
High 8.8

CVE-2026-118354

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin…

Google Chrome chromium libskia Browsers Debian

Oct 27, 2026
High 8.8

CVE-2026-119271

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised th…

Google Chrome chromium libskia Browsers Debian Ubuntu

Oct 30, 2026
High 8.8

CVE-2026-13885

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrar…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jun 30, 2026
High 8.8

CVE-2026-17712

Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside …

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
High 8.8

CVE-2026-3538

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Mar 4, 2026
High 8.8

CVE-2026-3931

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Mar 11, 2026
High 8.8

CVE-2026-4460

Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of boun…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Mar 20, 2026
High 8.8

CVE-2026-5870

Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code in…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 8, 2026
High 8.8

CVE-2026-85049

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insi…

Google Chrome chromium libskia Browsers Debian

Sep 3, 2026
High 8.8

CVE-2026-9923

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

May 28, 2026
High 8.8

CVE-2026-9983

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code ins…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
High 8.3

CVE-2026-10012

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rende…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

May 28, 2026
High 8.3

CVE-2026-10020

Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

May 28, 2026
High 8.3

CVE-2026-10925

Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromise…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
High 8.3

CVE-2026-11663

Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the rende…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 8, 2026
High 8.3

CVE-2026-13841

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rend…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jun 30, 2026
High 8.3

CVE-2026-14389

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the rend…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
High 8.3

CVE-2026-14427

Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the …

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
High 8.3

CVE-2026-14429

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
High 8.3

CVE-2026-15774

Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the rende…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 14, 2026
High 8.3

CVE-2026-17653

Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the render…

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
High 8.3

CVE-2026-7353

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Apr 28, 2026
High 8.3

CVE-2026-7920

Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the render…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 6, 2026
High 8.3

CVE-2026-7923

Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the r…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 6, 2026
High 8.3

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised…

Google Chrome chromium libskia Browsers Debian

Sep 15, 2026
High 8.3

CVE-2026-9892

Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
High 8.3

CVE-2026-9893

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rende…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
High 8.3

CVE-2026-9998 Public exploit

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
High 7.5

CVE-2024-8198 Public exploit

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Aug 28, 2024
High 7.5

CVE-2026-10009

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
High 7.5

CVE-2026-8510

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromi…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 14, 2026
High 7.5

CVE-2026-9909

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

May 28, 2026
Medium 6.5

CVE-2026-10977

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 6.5

CVE-2026-10985

Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data …

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 6.5

CVE-2026-10993

Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially se…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 6.5

CVE-2026-11039

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 6.5

CVE-2026-11057

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 6.5

CVE-2026-11121

Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker wh…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 6.5

CVE-2026-13820

Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jun 30, 2026
Medium 6.5

CVE-2026-15766

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sens…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 14, 2026
Medium 6.5

CVE-2026-17992

Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potent…

Google Chrome chromium libskia Browsers Debian

Jul 30, 2026
Medium 6.5

CVE-2026-6364

Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sen…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Apr 15, 2026
Medium 6.5

CVE-2026-78914

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read me…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 25, 2026
Medium 6.5

CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the re…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 25, 2026
Medium 6.5

CVE-2026-9981

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain poten…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
Medium 6.3

CVE-2025-0444

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Feb 4, 2025
Medium 5.8

CVE-2026-17745

Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the re…

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
Medium 5.3

CVE-2026-13971

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the ren…

Google Chrome chromium webkit2gtk Browsers Debian Ubuntu

Jun 30, 2026
Medium 5.3

CVE-2026-14414

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
Medium 5.3

CVE-2026-17914

Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain po…

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
Medium 5.3

CVE-2026-79147

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 25, 2026
Medium 4.3

CVE-2026-102325

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Sep 29, 2026
Medium 4.3

CVE-2026-103629

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data vi…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Oct 2, 2026
Medium 4.3

CVE-2026-106379

Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin…

Google Chrome chromium chromium Browsers Debian Wolfi

Oct 6, 2026
Medium 4.3

CVE-2026-11159

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 4, 2026
Medium 4.3

CVE-2026-118319

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit…

Google Chrome chromium libskia Browsers Debian

Oct 27, 2026
Medium 4.3

CVE-2026-14410

Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromi…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

Jul 1, 2026
Medium 4.3

CVE-2026-17757

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data v…

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
Medium 4.3

CVE-2026-17771

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data v…

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
Medium 4.3

CVE-2026-6298

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially s…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

Apr 15, 2026
Medium 4.3

CVE-2026-65333

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadO…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian

Aug 17, 2026
Medium 4.3

CVE-2026-79144

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data …

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 25, 2026
Medium 4.3

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin…

Google Chrome chromium libskia Browsers Debian

Sep 15, 2026
Medium 4.3

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-ori…

Google Chrome chromium libskia Browsers Debian

Sep 17, 2026
Low 3.3

CVE-2026-106399

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineeri…

Google Chrome chromium libskia Browsers Debian

Oct 6, 2026
Low 3.1

CVE-2026-10011

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had comprom…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 28, 2026
Low 3.1

CVE-2026-11675

Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the r…

Google Chrome chromium chromium Browsers Debian Wolfi

Jun 8, 2026
Low 3.1

CVE-2026-16417

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the re…

Google Chrome chromium webkit2gtk Browsers Debian

Jul 21, 2026
Low 3.1

CVE-2026-17702

Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromi…

Google Chrome chromium chromium Browsers Debian Wolfi

Jul 30, 2026
Low 3.1

CVE-2026-19160

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the re…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 6, 2026
Low 3.1

CVE-2026-78958

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised th…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 25, 2026
Low 3.1

CVE-2026-7949

Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the re…

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 6, 2026
Low 3.1

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the rend…

Google Chrome chromium libskia Browsers Debian

Sep 1, 2026
Low 3.1

CVE-2026-8579

Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker w…

Google Chrome chromium chromium Browsers Debian Ubuntu Wolfi

May 14, 2026
Low 3.1

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the render…

Google Chrome chromium libskia Browsers Debian

Sep 15, 2026

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2298302
report
https://bugzilla.redhat.com/show_bug.cgi?id=2307088
report
https://bugzilla.redhat.com/show_bug.cgi?id=2308415
report
https://bugzilla.redhat.com/show_bug.cgi?id=2308417
report
https://bugzilla.redhat.com/show_bug.cgi?id=2311665
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314571
report
https://bugzilla.redhat.com/show_bug.cgi?id=2338161
report
https://bugzilla.redhat.com/show_bug.cgi?id=2343797
report
https://bugzilla.redhat.com/show_bug.cgi?id=2444617
report
https://bugzilla.redhat.com/show_bug.cgi?id=2446868
report
https://bugzilla.redhat.com/show_bug.cgi?id=2449412
report
https://bugzilla.redhat.com/show_bug.cgi?id=2456802
report
https://bugzilla.redhat.com/show_bug.cgi?id=2458786
report
https://bugzilla.redhat.com/show_bug.cgi?id=2458798
report
https://bugzilla.redhat.com/show_bug.cgi?id=2463657
report
https://bugzilla.redhat.com/show_bug.cgi?id=2467316
report
https://bugzilla.redhat.com/show_bug.cgi?id=2467351
report
https://bugzilla.redhat.com/show_bug.cgi?id=2467385
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477624
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477666
report
https://bugzilla.redhat.com/show_bug.cgi?id=2482973
report
https://bugzilla.redhat.com/show_bug.cgi?id=2482975
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483023
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483035
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483045
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483056
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483062
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483070
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483103
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483108
report
https://bugzilla.redhat.com/show_bug.cgi?id=2483114
report
https://bugzilla.redhat.com/show_bug.cgi?id=2484949
report
https://bugzilla.redhat.com/show_bug.cgi?id=2484981
report
https://bugzilla.redhat.com/show_bug.cgi?id=2484992
report
https://bugzilla.redhat.com/show_bug.cgi?id=2485015
report
https://bugzilla.redhat.com/show_bug.cgi?id=2485036
report
https://bugzilla.redhat.com/show_bug.cgi?id=2485043
report
https://bugzilla.redhat.com/show_bug.cgi?id=2485071
report
https://bugzilla.redhat.com/show_bug.cgi?id=2485081

Critical: webkit2gtk3 security, bug fix, and enhancement update

Summary

Fixed packages 45

Vulnerabilities 92

Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromi…

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data …

Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the rende…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh…

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a san…

Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandb…

Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromis…

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the…

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit …

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds …

Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap …

Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitr…

Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit …

Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap …

Type confusion in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the render…

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit…

Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outs…

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin…

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised th…

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrar…

Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside …

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out …

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds…

Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of boun…

Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code in…

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insi…

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap c…

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code ins…

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rende…

Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote…

Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromise…

Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the rende…

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rend…

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the rend…

Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the …

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh…

Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the rende…

Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the render…

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the…

Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the render…

Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the r…

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised…

Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who …

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rende…

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the…

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromi…

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren…

Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data …

Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially se…

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v…

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker wh…

Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised…

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sens…

Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potent…

Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sen…

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read me…

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the re…

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain poten…

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap co…

Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the re…

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the ren…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh…

Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain po…

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend…

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin…

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data vi…

Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin…

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v…

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit…

Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromi…

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data v…

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data v…