Summary
Ein Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen oder andere nicht spezifizierte Angriffe durchzuführen.
Product
WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.
Vulnerabilities 11
-
High 8.8
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote a…
KEV Jul 22, 2025 -
High 8.8
The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequo…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iP…
-
High 7.5
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…
-
Medium 6.5
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and …
-
Medium 6.2
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iP…
-
Medium 6.2
A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's …
-
Medium 4.3
The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a mali…
-
Medium 4.0
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iP…
Revision history
-
#18
Neue Updates von SUSE aufgenommen
-
#17
Neue Updates von SUSE aufgenommen
-
#16
Neue Updates von openSUSE aufgenommen
-
#15
Neue Updates von SUSE aufgenommen
-
#14
Neue Updates von Dell aufgenommen
-
#13
Neue Updates von Dell aufgenommen
-
#12
Neue Updates von Gentoo aufgenommen
-
#11
Neue Updates von Red Hat aufgenommen
-
#10
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#9
Neue Updates von Fedora aufgenommen
-
#8
Neue Updates von SUSE aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Amazon und Ubuntu aufgenommen
-
#5
Neue Updates von Debian aufgenommen
-
#4
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#3
Neue Updates von IGEL und SUSE aufgenommen
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
WebKit Security Advisory vom 2025-08-03
https://webkitgtk.org/security/WSA-2025-0005.html
-
Fedora Security Advisory FEDORA-2025-61CA72F430 vom 2025-08-06
https://bodhi.fedoraproject.org/updates/FEDORA-2025-61ca72f430
-
Fedora Security Advisory FEDORA-2025-9B8165A4B3 vom 2025-08-06
https://bodhi.fedoraproject.org/updates/FEDORA-2025-9b8165a4b3
-
IGEL Security Notice ISN-2025-32 vom 2025-08-12
https://kb.igel.com/en/security-safety/current/isn-2025-32-webkit-vulnerabilities
-
SUSE Security Update SUSE-SU-2025:02766-1 vom 2025-08-12
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022141.html
-
SUSE Security Update SUSE-SU-2025:02765-1 vom 2025-08-12
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022142.html
-
SUSE Security Update SUSE-SU-2025:02777-1 vom 2025-08-13
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022150.html
-
Oracle Linux Security Advisory ELSA-2025-13780 vom 2025-08-14
https://linux.oracle.com/errata/ELSA-2025-13780.html
-
Red Hat Security Advisory RHSA-2025:13782 vom 2025-08-13
https://access.redhat.com/errata/RHSA-2025:13782
-
Red Hat Security Advisory RHSA-2025:13780 vom 2025-08-13
https://access.redhat.com/errata/RHSA-2025:13780
-
Oracle Linux Security Advisory ELSA-2025-13782 vom 2025-08-14
https://linux.oracle.com/errata/ELSA-2025-13782.html
-
Debian Security Advisory DSA-5978 vom 2025-08-18
https://lists.debian.org/debian-security-announce/2025/msg00142.html
-
Amazon Linux Security Advisory ALAS2-2025-2970 vom 2025-08-19
https://alas.aws.amazon.com/AL2/ALAS2-2025-2970.html
-
Ubuntu Security Notice USN-7702-1 vom 2025-08-19
https://ubuntu.com/security/notices/USN-7702-1
-
Debian Security Advisory DLA-4276 vom 2025-08-20
https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html
-
Red Hat Security Advisory RHSA-2025:14432 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14432
-
Red Hat Security Advisory RHSA-2025:14434 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14434
-
Red Hat Security Advisory RHSA-2025:14433 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14433
-
Red Hat Security Advisory RHSA-2025:14423 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14423
-
Red Hat Security Advisory RHSA-2025:14422 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14422
-
Red Hat Security Advisory RHSA-2025:14421 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14421
-
Red Hat Security Advisory RHSA-2025:14486 vom 2025-08-25
https://access.redhat.com/errata/RHSA-2025:14486
-
SUSE Security Update SUSE-SU-2025:02973-1 vom 2025-08-25
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022263.html
-
Fedora Security Advisory FEDORA-EPEL-2025-BFA97EDD0C vom 2025-09-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-bfa97edd0c
-
Rocky Linux Security Advisory RLSA-2025:13780 vom 2025-09-08
https://errata.build.resf.org/RLSA-2025:13780
-
Red Hat Security Advisory RHSA-2025:15729 vom 2025-09-15
https://access.redhat.com/errata/RHSA-2025:15729
-
Gentoo Linux Security Advisory GLSA-202511-02 vom 2025-11-25
https://security.gentoo.org/glsa/202511-02
-
Dell Security Advisory DSA-2025-438 vom 2025-12-01
https://www.dell.com/support/kbdoc/de-de/000397455/dsa-2025-438-security-update-for-dell-networker-runtime-environment-multiple-third-party-component-vulnerabilities
-
Dell Security Advisory DSA-2026-313 vom 2026-09-04
https://www.dell.com/support/kbdoc/de-de/000505510/dsa-2026-313-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities
-
SUSE Security Update SUSE-SU-2026:4676-1 vom 2026-10-14
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029832.html
-
openSUSE Security Update OPENSUSE-SU-2026:22076-1 vom 2026-10-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VPA3BRJVKWFPVYTP2VIMYJRF3ZTTMDEF/
-
SUSE Security Update SUSE-SU-2026:24225-1 vom 2026-10-20
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029936.html
-
SUSE Security Update SUSE-SU-2026:4858-1 vom 2026-10-22
https://lists.suse.com/pipermail/sle-security-updates/2026-October/030022.html