WebKitGTK: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 13

• High 8.8
  CVE-2023-43000 Exploited

  A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Nov 5, 2025

  KEV Mar 5, 2026
• High 8.8
  CVE-2025-43419

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• High 8.8
  CVE-2025-43431

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• High 8.1
  CVE-2025-43480

  The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 6.5
  CVE-2025-43440

  This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Taho…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43392

  The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43425

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43427

  This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…

  Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43429

  A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43430

  This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43432

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43434

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43443

  This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025

Revision history

1. 2026-03-30 #13

   Neue Updates von SUSE aufgenommen

2. 2026-03-05 #12

   Exploit CVE-2023-43000

3. 2026-01-22 #11

   Neue Updates von SUSE aufgenommen

4. 2026-01-21 #10

   Neue Updates von openSUSE aufgenommen

5. 2026-01-05 #9

   Neue Updates von SUSE und Amazon aufgenommen

6. 2025-12-21 #8

   Neue Updates von Red Hat aufgenommen

7. 2025-12-17 #7

   Neue Updates von Red Hat und SUSE aufgenommen

8. 2025-12-16 #6

   Neue Updates von SUSE und Red Hat aufgenommen

9. 2025-12-08 #5

   Neue Updates von Oracle Linux und Ubuntu aufgenommen

10. 2025-12-07 #4

    Neue Updates von Red Hat aufgenommen

11. 2025-12-03 #3

    Neue Updates von Debian aufgenommen

12. 2025-11-23 #2

    Neue Updates von Fedora aufgenommen

13. 2025-11-20 #1

    Initiale Fassung

References

• WebKitGTK and WPE WebKit Security Advisory vom 2025-11-20
  https://webkitgtk.org/security/WSA-2025-0008.html
• Fedora Security Advisory FEDORA-2025-6F3E9E3AF6 vom 2025-11-23
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-6f3e9e3af6
• Debian Security Advisory DLA-4394 vom 2025-12-04
  https://lists.debian.org/debian-lts-announce/2025/12/msg00005.html
• Debian Security Advisory DSA-6070 vom 2025-12-04
  https://lists.debian.org/debian-security-announce/2025/msg00236.html
• Red Hat Security Advisory RHSA-2025:22790 vom 2025-12-08
  https://access.redhat.com/errata/RHSA-2025:22790
• Red Hat Security Advisory RHSA-2025:22789 vom 2025-12-08
  https://access.redhat.com/errata/RHSA-2025:22789
• Oracle Linux Security Advisory ELSA-2025-22790 vom 2025-12-09
  http://linux.oracle.com/errata/ELSA-2025-22790.html
• Ubuntu Security Notice USN-7914-1 vom 2025-12-08
  https://ubuntu.com/security/notices/USN-7914-1
• Oracle Linux Security Advisory ELSA-2025-22789 vom 2025-12-09
  http://linux.oracle.com/errata/ELSA-2025-22789.html
• Rocky Linux Security Advisory RLSA-2025:22790 vom 2025-12-09
  https://errata.build.resf.org/RLSA-2025:22790
• Rocky Linux Security Advisory RLSA-2025:22789 vom 2025-12-09
  https://errata.build.resf.org/RLSA-2025:22789
• SUSE Security Update SUSE-SU-2025:4416-1 vom 2025-12-16
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023564.html
• Red Hat Security Advisory RHSA-2025:23451 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23451
• Red Hat Security Advisory RHSA-2025:23434 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23434
• Red Hat Security Advisory RHSA-2025:23433 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23433
• Red Hat Security Advisory RHSA-2025:23452 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23452
• SUSE Security Update SUSE-SU-2025:4423-1 vom 2025-12-17
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023572.html
• Red Hat Security Advisory RHSA-2025:23591 vom 2025-12-18
  https://access.redhat.com/errata/RHSA-2025:23591
• Red Hat Security Advisory RHSA-2025:23583 vom 2025-12-18
  https://access.redhat.com/errata/RHSA-2025:23583
• Red Hat Security Advisory RHSA-2025:23742 vom 2025-12-22
  https://access.redhat.com/errata/RHSA-2025:23742
• Red Hat Security Advisory RHSA-2025:23743 vom 2025-12-22
  https://access.redhat.com/errata/RHSA-2025:23743
• SUSE Security Update SUSE-SU-2026:0021-1 vom 2026-01-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023667.html
• Amazon Linux Security Advisory ALAS2-2025-3114 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3114.html
• openSUSE Security Update OPENSUSE-SU-2026:20065-1 vom 2026-01-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULXFWAFLRDFOQMJN6XHGEUVRUWFAEJJC/
• SUSE Security Update SUSE-SU-2026:20102-1 vom 2026-01-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023882.html
• CISA KEV CVE-2023-43000 vom 2026-03-06
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• SUSE Security Update SUSE-SU-2026:1139-1 vom 2026-03-31
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/025063.html
• SUSE Security Update SUSE-SU-2026:1150-1 vom 2026-03-31
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/025065.html