Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.50.2-0ubuntu0.22.04.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | webkit2gtk | 2.50.2-0ubuntu0.24.04.2 |
| Ubuntu · 25.10 | webkit2gtk | 2.50.2-0ubuntu0.25.10.2 |
Vulnerabilities 10
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…
-
Medium 6.5
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Taho…
-
Medium 4.3
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, ma…
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…
-
Medium 4.3
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadO…
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 an…
-
Medium 4.3
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26…
References
-
report
https://ubuntu.com/security/CVE-2025-43392
-
report
https://ubuntu.com/security/CVE-2025-43425
-
report
https://ubuntu.com/security/CVE-2025-43427
-
report
https://ubuntu.com/security/CVE-2025-43429
-
report
https://ubuntu.com/security/CVE-2025-43430
-
report
https://ubuntu.com/security/CVE-2025-43431
-
report
https://ubuntu.com/security/CVE-2025-43432
-
report
https://ubuntu.com/security/CVE-2025-43434
-
report
https://ubuntu.com/security/CVE-2025-43440
-
report
https://ubuntu.com/security/CVE-2025-43443