Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.50.4-0ubuntu0.22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | webkit2gtk | 2.50.4-0ubuntu0.24.04.1 |
| Ubuntu · 25.10 | webkit2gtk | 2.50.4-0ubuntu0.25.10.1 |
Vulnerabilities 7
-
High 8.8
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfo…
KEV Dec 12, 2025 -
High 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…
KEV Dec 15, 2025 -
Medium 4.3
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…
-
Medium 4.3
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and i…
-
Low 3.1
A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS …
References
-
report
https://ubuntu.com/security/CVE-2025-14174
-
report
https://ubuntu.com/security/CVE-2025-43501
-
report
https://ubuntu.com/security/CVE-2025-43529
-
report
https://ubuntu.com/security/CVE-2025-43531
-
report
https://ubuntu.com/security/CVE-2025-43535
-
report
https://ubuntu.com/security/CVE-2025-43536
-
report
https://ubuntu.com/security/CVE-2025-43541