Medium WID-SEC-2026-0911 8 CVEs

WebKitGTK: Mehrere Schwachstellen

Published Mar 29, 2026 · Updated Oct 28, 2026 · Revision 17 · de-DE

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: Rocky Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.

Vulnerabilities 8

Medium 6.5

CVE-2026-20665

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 6.5

CVE-2026-28857

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 5.4

CVE-2026-20643 Public exploit

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgro…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 17, 2026
Medium 4.3

CVE-2026-20664

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-20691

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28859

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28861

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28871

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 25, 2026

Revision history

2026-10-28 #17
Neue Updates von Fedora aufgenommen
2026-05-31 #16
Neue Updates von Red Hat aufgenommen
2026-05-28 #15
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2026-05-19 #14
Neue Updates von Red Hat aufgenommen
2026-05-12 #13
Neue Updates von Red Hat aufgenommen
2026-05-11 #12
Neue Updates von Red Hat aufgenommen
2026-05-07 #11
Neue Updates von SUSE aufgenommen
2026-05-06 #10
Neue Updates von Ubuntu und Red Hat aufgenommen
2026-05-05 #9
Neue Updates von Red Hat aufgenommen
2026-04-29 #8
Neue Updates von Red Hat aufgenommen
2026-04-28 #7
Neue Updates von Debian aufgenommen
2026-04-27 #6
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2026-04-26 #5
Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen
2026-04-22 #4
Neue Updates von Oracle Linux aufgenommen
2026-04-21 #3
Neue Updates von SUSE aufgenommen
2026-04-15 #2
Neue Updates von SUSE aufgenommen
2026-03-29 #1
Initiale Fassung

References

WebKit Security Advisory vom 2026-03-29
https://wpewebkit.org/security/WSA-2026-0002.html
OSS Security Mailing List vom 2026-03-29
https://seclists.org/oss-sec/2026/q1/399
SUSE Security Update SUSE-SU-2026:1364-1 vom 2026-04-15
https://lists.suse.com/pipermail/sle-security-updates/2026-April/025356.html
SUSE Security Update SUSE-SU-2026:21180-1 vom 2026-04-21
https://lists.suse.com/pipermail/sle-security-updates/2026-April/025532.html
Red Hat Security Advisory RHSA-2026:9692 vom 2026-04-22
https://access.redhat.com/errata/RHSA-2026:9692
Oracle Linux Security Advisory ELSA-2026-9692 vom 2026-04-22
https://linux.oracle.com/errata/ELSA-2026-9692.html
Red Hat Security Advisory RHSA-2026:10702 vom 2026-04-27
https://access.redhat.com/errata/RHSA-2026:10702
Rocky Linux Security Advisory RLSA-2026:9692 vom 2026-04-24
https://errata.build.resf.org/RLSA-2026:9692
Rocky Linux Security Advisory RLSA-2026:10702 vom 2026-04-27
https://errata.build.resf.org/RLSA-2026:10702
Red Hat Security Advisory RHSA-2026:11329 vom 2026-04-28
https://access.redhat.com/errata/RHSA-2026:11329
Oracle Linux Security Advisory ELSA-2026-10702 vom 2026-04-28
https://linux.oracle.com/errata/ELSA-2026-10702.html
Debian Security Advisory DSA-6232 vom 2026-04-28
https://lists.debian.org/debian-security-announce/2026/msg00142.html
SUSE Security Update SUSE-SU-2026:1648-1 vom 2026-04-29
https://lists.suse.com/pipermail/sle-security-updates/2026-April/025758.html
Red Hat Security Advisory RHSA-2026:11814 vom 2026-04-29
https://access.redhat.com/errata/RHSA-2026:11814
Amazon Linux Security Advisory ALAS2-2026-3270 vom 2026-04-30
https://alas.aws.amazon.com/AL2/ALAS2-2026-3270.html
Red Hat Security Advisory RHSA-2026:13845 vom 2026-05-05
https://access.redhat.com/errata/RHSA-2026:13845
Ubuntu Security Notice USN-8237-1 vom 2026-05-06
https://ubuntu.com/security/notices/USN-8237-1
Red Hat Security Advisory RHSA-2026:14659 vom 2026-05-07
https://access.redhat.com/errata/RHSA-2026:14659
SUSE Security Update SUSE-SU-2026:1749-1 vom 2026-05-07
https://lists.suse.com/pipermail/sle-security-updates/2026-May/025925.html
Red Hat Security Advisory RHSA-2026:16056 vom 2026-05-11
https://access.redhat.com/errata/RHSA-2026:16056
Red Hat Security Advisory RHSA-2026:16695 vom 2026-05-13
https://access.redhat.com/errata/RHSA-2026:16695
Red Hat Security Advisory RHSA-2026:19206 vom 2026-05-20
https://access.redhat.com/errata/RHSA-2026:19206
Red Hat Security Advisory RHSA-2026:19535 vom 2026-05-20
https://access.redhat.com/errata/RHSA-2026:19535
Rocky Linux Security Advisory RLSA-2026:19206 vom 2026-05-28
https://errata.build.resf.org/RLSA-2026:19206
Red Hat Security Advisory RHSA-2026:22136 vom 2026-06-01
https://access.redhat.com/errata/RHSA-2026:22136
Fedora Security Advisory FEDORA-EPEL-2026-E4ED02098A vom 2026-10-28
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e4ed02098a
Fedora Security Advisory FEDORA-EPEL-2026-45AA299208 vom 2026-10-28
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-45aa299208