Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.50.3-0ubuntu0.22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | webkit2gtk | 2.50.3-0ubuntu0.24.04.1 |
| Ubuntu · 25.10 | webkit2gtk | 2.50.3-0ubuntu0.25.10.1 |
Vulnerabilities 4
-
High 8.8
Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
-
High 7.4CVE-2025-13947 Public exploit
Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations orig…
-
Medium 4.3
Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and …
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 1…