WebKitGTK: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 8.8
  CVE-2025-66287

  Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

  A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

  Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Dec 4, 2025
• High 7.5
  CVE-2025-13502

  Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

  A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

  Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Nov 25, 2025
• High 7.4
  CVE-2025-13947 Public exploit

  Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

  A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations orig…

  Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Dec 3, 2025
• Medium 4.3
  CVE-2025-43421

  Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and …

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• Medium 4.3
  CVE-2025-43458

  This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 1…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025

Revision history

1. 2026-03-30 #12

   Neue Updates von SUSE aufgenommen

2. 2026-01-22 #11

   Neue Updates von SUSE aufgenommen

3. 2026-01-21 #10

   Neue Updates von openSUSE aufgenommen

4. 2026-01-05 #9

   Neue Updates von Amazon, SUSE und Ubuntu aufgenommen

5. 2025-12-21 #8

   Neue Updates von Red Hat aufgenommen

6. 2025-12-17 #7

   Neue Updates von Red Hat und SUSE aufgenommen

7. 2025-12-16 #6

   Neue Updates von SUSE und Red Hat aufgenommen

8. 2025-12-10 #5

   Neue Updates von Red Hat aufgenommen

9. 2025-12-09 #4

   Neue Updates von Debian aufgenommen

10. 2025-12-08 #3

    Neue Updates von Oracle Linux aufgenommen

11. 2025-12-07 #2

    Neue Updates von Red Hat und Fedora aufgenommen

12. 2025-12-04 #1

    Initiale Fassung

References

• WebKitGTK and WPE WebKit Security Advisory WSA-2025-0009 vom 2025-12-04
  https://webkitgtk.org/security/WSA-2025-0009.html
• Red Hat Security Advisory RHSA-2025:22790 vom 2025-12-08
  https://access.redhat.com/errata/RHSA-2025:22790
• Red Hat Security Advisory RHSA-2025:22789 vom 2025-12-08
  https://access.redhat.com/errata/RHSA-2025:22789
• Fedora Security Advisory FEDORA-2025-B07CD2CAE2 vom 2025-12-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-b07cd2cae2
• Fedora Security Advisory FEDORA-2025-7536D2D941 vom 2025-12-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-7536d2d941
• Oracle Linux Security Advisory ELSA-2025-22790 vom 2025-12-09
  http://linux.oracle.com/errata/ELSA-2025-22790.html
• Oracle Linux Security Advisory ELSA-2025-22789 vom 2025-12-09
  http://linux.oracle.com/errata/ELSA-2025-22789.html
• Rocky Linux Security Advisory RLSA-2025:22789 vom 2025-12-09
  https://errata.build.resf.org/RLSA-2025:22789
• Rocky Linux Security Advisory RLSA-2025:22790 vom 2025-12-09
  https://errata.build.resf.org/RLSA-2025:22790
• Debian Security Advisory DSA-6074 vom 2025-12-09
  https://lists.debian.org/debian-security-announce/2025/msg00240.html
• Debian Security Advisory DLA-4399 vom 2025-12-10
  https://lists.debian.org/debian-lts-announce/2025/12/msg00010.html
• Red Hat Security Advisory RHSA-2025:23110 vom 2025-12-11
  https://access.redhat.com/errata/RHSA-2025:23110
• SUSE Security Update SUSE-SU-2025:4416-1 vom 2025-12-16
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023564.html
• Red Hat Security Advisory RHSA-2025:23451 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23451
• Red Hat Security Advisory RHSA-2025:23434 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23434
• Red Hat Security Advisory RHSA-2025:23433 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23433
• Red Hat Security Advisory RHSA-2025:23452 vom 2025-12-17
  https://access.redhat.com/errata/RHSA-2025:23452
• SUSE Security Update SUSE-SU-2025:4423-1 vom 2025-12-17
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023572.html
• Red Hat Security Advisory RHSA-2025:23591 vom 2025-12-18
  https://access.redhat.com/errata/RHSA-2025:23591
• Red Hat Security Advisory RHSA-2025:23583 vom 2025-12-18
  https://access.redhat.com/errata/RHSA-2025:23583
• Red Hat Security Advisory RHSA-2025:23742 vom 2025-12-22
  https://access.redhat.com/errata/RHSA-2025:23742
• Amazon Linux Security Advisory ALAS2-2025-3114 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3114.html
• SUSE Security Update SUSE-SU-2026:0021-1 vom 2026-01-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023667.html
• Ubuntu Security Notice USN-7941-1 vom 2026-01-06
  https://ubuntu.com/security/notices/USN-7941-1
• openSUSE Security Update OPENSUSE-SU-2026:20065-1 vom 2026-01-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULXFWAFLRDFOQMJN6XHGEUVRUWFAEJJC/
• SUSE Security Update SUSE-SU-2026:20102-1 vom 2026-01-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023882.html
• SUSE Security Update SUSE-SU-2026:1150-1 vom 2026-03-31
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/025065.html