WebKitGTK: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 23

• High 8.8
  CVE-2026-43705

  A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• High 8.8
  CVE-2026-43715

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• High 8.8
  CVE-2026-43731

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• High 7.1
  CVE-2026-43701

  The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• High 7.1
  CVE-2026-43725

  The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-39872

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43663

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43676

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43699

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43707

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43712

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43713

  A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43716

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43720

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43721

  This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43726

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43727

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43732

  A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPad…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43734

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43740

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43742

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 6.5
  CVE-2026-43745

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 29, 2026
• Medium 5.6
  CVE-2024-4367 Public exploit EPSS 71%

  PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

  A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu npm
  May 14, 2024

Revision history

1. 2026-10-28 #18

   Neue Updates von Fedora aufgenommen

2. 2026-10-04 #17

   Neue Updates von Oracle Linux aufgenommen

3. 2026-09-30 #16

   Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

4. 2026-08-31 #15

   Neue Updates von Ubuntu aufgenommen

5. 2026-08-24 #14

   Neue Updates von Red Hat aufgenommen

6. 2026-08-23 #13

   Neue Updates von Red Hat aufgenommen

7. 2026-08-19 #12

   Neue Updates von Red Hat aufgenommen

8. 2026-08-16 #11

   Neue Updates von SUSE aufgenommen

9. 2026-08-13 #10

   Neue Updates von Red Hat aufgenommen

10. 2026-08-11 #9

    Neue Updates von SUSE aufgenommen

11. 2026-08-04 #8

    Neue Updates von Amazon aufgenommen

12. 2026-08-02 #7

    Neue Updates von openSUSE aufgenommen

13. 2026-07-28 #6

    Neue Updates von SUSE aufgenommen

14. 2026-07-23 #5

    Neue Updates von Debian aufgenommen

15. 2026-07-22 #4

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

16. 2026-07-21 #3

    Neue Updates von Oracle Linux aufgenommen

17. 2026-07-20 #2

    Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

18. 2026-07-14 #1

    Initiale Fassung

References

• WebKitGTK and WPE WebKit Security Advisory WSA-2026-0004 vom 2026-07-14
  https://webkitgtk.org/security/WSA-2026-0004.html
• Rocky Linux Security Advisory RLSA-2026:42088 vom 2026-07-21
  https://errata.build.resf.org/RLSA-2026:42088
• Red Hat Security Advisory RHSA-2026:42088 vom 2026-07-20
  https://access.redhat.com/errata/RHSA-2026:42088
• Red Hat Security Advisory RHSA-2026:42062 vom 2026-07-20
  https://access.redhat.com/errata/RHSA-2026:42062
• Oracle Linux Security Advisory ELSA-2026-42062 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-42062.html
• Oracle Linux Security Advisory ELSA-2026-42088 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-42088.html
• Rocky Linux Security Advisory RLSA-2026:42062 vom 2026-07-22
  https://errata.build.resf.org/RLSA-2026:42062
• Debian Security Advisory DSA-6398 vom 2026-07-23
  https://security-tracker.debian.org/tracker/DSA-6398-1
• SUSE Security Update SUSE-SU-2026:3338-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027981.html
• SUSE Security Update SUSE-SU-2026:3396-1 vom 2026-07-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028024.html
• openSUSE Security Update OPENSUSE-SU-2026:21508-1 vom 2026-08-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X3UTQEC6MVKS5Z73DXLEDK3SG5M2N2BR/
• Amazon Linux Security Advisory ALAS2-2026-3843 vom 2026-08-05
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3843.html
• SUSE Security Update SUSE-SU-2026:3555-1 vom 2026-08-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028198.html
• Red Hat Security Advisory RHSA-2026:54634 vom 2026-08-13
  https://access.redhat.com/errata/RHSA-2026:54634
• SUSE Security Update SUSE-SU-2026:23133-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028313.html
• SUSE Security Update SUSE-SU-2026:23111-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028331.html
• Red Hat Security Advisory RHSA-2026:57348 vom 2026-08-20
  https://access.redhat.com/errata/RHSA-2026:57348
• Red Hat Security Advisory RHSA-2026:58564 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58564
• Red Hat Security Advisory RHSA-2026:58550 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58550
• Red Hat Security Advisory RHSA-2026:59326 vom 2026-08-25
  https://access.redhat.com/errata/RHSA-2026:59326
• Red Hat Security Advisory RHSA-2026:59325 vom 2026-08-25
  https://access.redhat.com/errata/RHSA-2026:59325
• Ubuntu Security Notice USN-8703-1 vom 2026-08-31
  https://ubuntu.com/security/notices/USN-8703-1
• Red Hat Security Advisory RHSA-2026:74084 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:74084
• Rocky Linux Security Advisory RLSA-2026:74084 vom 2026-10-01
  https://errata.build.resf.org/RLSA-2026:74084
• Oracle Linux Security Advisory ELSA-2026-74084 vom 2026-10-02
  https://linux.oracle.com/errata/ELSA-2026-74084.html
• Fedora Security Advisory FEDORA-EPEL-2026-45AA299208 vom 2026-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-45aa299208
• Fedora Security Advisory FEDORA-EPEL-2026-E4ED02098A vom 2026-10-28
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e4ed02098a