Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.
Product
WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.
Vulnerabilities 6
-
High 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…
KEV Dec 15, 2025 -
Medium 4.3
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…
-
Medium 4.3
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and i…
-
Low 3.1
A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS …
Revision history
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von openSUSE aufgenommen
-
#5
Neue Updates von Ubuntu aufgenommen
-
#4
Neue Updates von Amazon und SUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
RedHat Security Advisory vom 2025-12-18
https://access.redhat.com/errata/RHSA-2025:23700
-
RedHat Security Advisory vom 2025-12-18
https://access.redhat.com/errata/RHSA-2025:23663
-
Rocky Linux Security Advisory RLSA-2025:23663 vom 2025-12-19
https://errata.build.resf.org/RLSA-2025:23663
-
Oracle Linux Security Advisory ELSA-2025-23700 vom 2025-12-19
https://linux.oracle.com/errata/ELSA-2025-23700.html
-
Rocky Linux Security Advisory RLSA-2025:23700 vom 2025-12-19
https://errata.build.resf.org/RLSA-2025:23700
-
Oracle Linux Security Advisory ELSA-2025-23663 vom 2025-12-19
https://linux.oracle.com/errata/ELSA-2025-23663.html
-
Red Hat Security Advisory RHSA-2025:23972 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23972
-
Red Hat Security Advisory RHSA-2025:23971 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23971
-
Red Hat Security Advisory RHSA-2025:23970 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23970
-
Red Hat Security Advisory RHSA-2025:23969 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23969
-
Red Hat Security Advisory RHSA-2025:23968 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23968
-
Red Hat Security Advisory RHSA-2025:23967 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23967
-
Red Hat Security Advisory RHSA-2025:23973 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23973
-
Red Hat Security Advisory RHSA-2025:23974 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23974
-
Red Hat Security Advisory RHSA-2025:23975 vom 2025-12-24
https://access.redhat.com/errata/RHSA-2025:23975
-
SUSE Security Update SUSE-SU-2025:4527-1 vom 2025-12-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4QTIPNAMCQ2AWMIWYKYOMSADYRWATNCC/
-
SUSE Security Update SUSE-SU-2025:4528-1 vom 2025-12-26
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023654.html
-
Amazon Linux Security Advisory ALAS2-2025-3114 vom 2026-01-05
https://alas.aws.amazon.com/AL2/ALAS2-2025-3114.html
-
SUSE Security Update SUSE-SU-2026:0021-1 vom 2026-01-05
https://lists.suse.com/pipermail/sle-security-updates/2026-January/023667.html
-
Ubuntu Security Notice USN-7957-1 vom 2026-01-13
https://ubuntu.com/security/notices/USN-7957-1
-
openSUSE Security Update OPENSUSE-SU-2026:20065-1 vom 2026-01-21
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULXFWAFLRDFOQMJN6XHGEUVRUWFAEJJC/
-
SUSE Security Update SUSE-SU-2026:20102-1 vom 2026-01-23
https://lists.suse.com/pipermail/sle-security-updates/2026-January/023882.html