Vulnerability-Lookup

RHSA-2026:57348

Vulnerability from csaf_redhat - Published: 2026-08-20 07:34 - Updated: 2026-08-21 20:15

Summary

Red Hat Security Advisory: webkit2gtk3 security update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) * webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) * webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-4367

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-39872

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43663

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43676

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43699

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43701

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper checks, potentially allowing access to resources that should be restricted.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CWE-284 - Improper Access Control

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-43705

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a type confusion due to improper checks, leading to memory corruption.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-43707

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger memory corruption due to improper memory handling, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43712

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper memory handling, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43713

A flaw was found in WebKitGTK. Visiting a website can leak sensitive data due to a permissions issue that was addressed with additional restrictions.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-284 - Improper Access Control

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43715

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-43716

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43720

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43721

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-732 - Incorrect Permission Assignment for Critical Resource

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43725

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper input validation, potentially allowing access to resources that should be restricted.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CWE-20 - Improper Input Validation

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-43726

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43727

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43731

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-43732

A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43734

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43740

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, leading to disclosure of process memory.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43742

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-43745

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-64787

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

148 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:57348	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2280382	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500519	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500520	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500521	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500522	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500523	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500524	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500525	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500526	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500527	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500528	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500529	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500530	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500531	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500532	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500533	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500534	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500535	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500536	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500537	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500538	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500539	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500540	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-4367	self
https://bugzilla.redhat.com/show_bug.cgi?id=2280382	external
https://www.cve.org/CVERecord?id=CVE-2024-4367	external
https://nvd.nist.gov/vuln/detail/CVE-2024-4367	external
https://webkitgtk.org/security/WSA-2026-0004.html	external
https://www.mozilla.org/en-US/security/advisories…	external
https://www.mozilla.org/en-US/security/advisories…	external
https://access.redhat.com/security/cve/CVE-2026-39872	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500519	external
https://www.cve.org/CVERecord?id=CVE-2026-39872	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39872	external
https://bugs.webkit.org/show_bug.cgi?id=313528	external
https://access.redhat.com/security/cve/CVE-2026-43663	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500520	external
https://www.cve.org/CVERecord?id=CVE-2026-43663	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43663	external
https://bugs.webkit.org/show_bug.cgi?id=312781	external
https://access.redhat.com/security/cve/CVE-2026-43676	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500521	external
https://www.cve.org/CVERecord?id=CVE-2026-43676	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43676	external
https://bugs.webkit.org/show_bug.cgi?id=317231	external
https://access.redhat.com/security/cve/CVE-2026-43699	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500522	external
https://www.cve.org/CVERecord?id=CVE-2026-43699	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43699	external
https://bugs.webkit.org/show_bug.cgi?id=317227	external
https://access.redhat.com/security/cve/CVE-2026-43701	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500523	external
https://www.cve.org/CVERecord?id=CVE-2026-43701	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43701	external
https://bugs.webkit.org/show_bug.cgi?id=315004	external
https://access.redhat.com/security/cve/CVE-2026-43705	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500524	external
https://www.cve.org/CVERecord?id=CVE-2026-43705	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43705	external
https://bugs.webkit.org/show_bug.cgi?id=314528	external
https://access.redhat.com/security/cve/CVE-2026-43707	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500525	external
https://www.cve.org/CVERecord?id=CVE-2026-43707	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43707	external
https://bugs.webkit.org/show_bug.cgi?id=315951	external
https://access.redhat.com/security/cve/CVE-2026-43712	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500526	external
https://www.cve.org/CVERecord?id=CVE-2026-43712	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43712	external
https://bugs.webkit.org/show_bug.cgi?id=314235	external
https://access.redhat.com/security/cve/CVE-2026-43713	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500527	external
https://www.cve.org/CVERecord?id=CVE-2026-43713	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43713	external
https://bugs.webkit.org/show_bug.cgi?id=314806	external
https://access.redhat.com/security/cve/CVE-2026-43715	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500528	external
https://www.cve.org/CVERecord?id=CVE-2026-43715	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43715	external
https://bugs.webkit.org/show_bug.cgi?id=313577	external
https://access.redhat.com/security/cve/CVE-2026-43716	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500529	external
https://www.cve.org/CVERecord?id=CVE-2026-43716	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43716	external
https://bugs.webkit.org/show_bug.cgi?id=313473	external
https://access.redhat.com/security/cve/CVE-2026-43720	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500530	external
https://www.cve.org/CVERecord?id=CVE-2026-43720	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43720	external
https://bugs.webkit.org/show_bug.cgi?id=313175	external
https://access.redhat.com/security/cve/CVE-2026-43721	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500531	external
https://www.cve.org/CVERecord?id=CVE-2026-43721	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43721	external
https://bugs.webkit.org/show_bug.cgi?id=313478	external
https://access.redhat.com/security/cve/CVE-2026-43725	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500532	external
https://www.cve.org/CVERecord?id=CVE-2026-43725	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43725	external
https://bugs.webkit.org/show_bug.cgi?id=312832	external
https://access.redhat.com/security/cve/CVE-2026-43726	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500533	external
https://www.cve.org/CVERecord?id=CVE-2026-43726	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43726	external
https://bugs.webkit.org/show_bug.cgi?id=313857	external
https://access.redhat.com/security/cve/CVE-2026-43727	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500534	external
https://www.cve.org/CVERecord?id=CVE-2026-43727	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43727	external
https://bugs.webkit.org/show_bug.cgi?id=313691	external
https://access.redhat.com/security/cve/CVE-2026-43731	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500535	external
https://www.cve.org/CVERecord?id=CVE-2026-43731	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43731	external
https://bugs.webkit.org/show_bug.cgi?id=314115	external
https://access.redhat.com/security/cve/CVE-2026-43732	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500536	external
https://www.cve.org/CVERecord?id=CVE-2026-43732	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43732	external
https://bugs.webkit.org/show_bug.cgi?id=313085	external
https://access.redhat.com/security/cve/CVE-2026-43734	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500537	external
https://www.cve.org/CVERecord?id=CVE-2026-43734	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43734	external
https://bugs.webkit.org/show_bug.cgi?id=313693	external
https://access.redhat.com/security/cve/CVE-2026-43740	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500538	external
https://www.cve.org/CVERecord?id=CVE-2026-43740	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43740	external
https://bugs.webkit.org/show_bug.cgi?id=308046	external
https://access.redhat.com/security/cve/CVE-2026-43742	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500539	external
https://www.cve.org/CVERecord?id=CVE-2026-43742	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43742	external
https://bugs.webkit.org/show_bug.cgi?id=315161	external
https://access.redhat.com/security/cve/CVE-2026-43745	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500540	external
https://www.cve.org/CVERecord?id=CVE-2026-43745	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43745	external
https://bugs.webkit.org/show_bug.cgi?id=315365	external
https://access.redhat.com/security/cve/CVE-2026-64787	self
https://bugzilla.redhat.com/show_bug.cgi?id=2520320	external
https://www.cve.org/CVERecord?id=CVE-2026-64787	external
https://nvd.nist.gov/vuln/detail/CVE-2026-64787	external
https://webkitgtk.org/security/WSA-2026-0005.html	external

Acknowledgments

the Mozilla project

Thomas Rinsma of Codean Labs

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)\n\n* webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)\n\n* webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)\n\n* webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)\n\n* webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)\n\n* webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:57348",
        "url": "https://access.redhat.com/errata/RHSA-2026:57348"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2280382",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2280382"
      },
      {
        "category": "external",
        "summary": "2500519",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500519"
      },
      {
        "category": "external",
        "summary": "2500520",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500520"
      },
      {
        "category": "external",
        "summary": "2500521",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500521"
      },
      {
        "category": "external",
        "summary": "2500522",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500522"
      },
      {
        "category": "external",
        "summary": "2500523",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500523"
      },
      {
        "category": "external",
        "summary": "2500524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500524"
      },
      {
        "category": "external",
        "summary": "2500525",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500525"
      },
      {
        "category": "external",
        "summary": "2500526",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500526"
      },
      {
        "category": "external",
        "summary": "2500527",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500527"
      },
      {
        "category": "external",
        "summary": "2500528",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500528"
      },
      {
        "category": "external",
        "summary": "2500529",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500529"
      },
      {
        "category": "external",
        "summary": "2500530",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500530"
      },
      {
        "category": "external",
        "summary": "2500531",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500531"
      },
      {
        "category": "external",
        "summary": "2500532",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500532"
      },
      {
        "category": "external",
        "summary": "2500533",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500533"
      },
      {
        "category": "external",
        "summary": "2500534",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500534"
      },
      {
        "category": "external",
        "summary": "2500535",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500535"
      },
      {
        "category": "external",
        "summary": "2500536",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500536"
      },
      {
        "category": "external",
        "summary": "2500537",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500537"
      },
      {
        "category": "external",
        "summary": "2500538",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500538"
      },
      {
        "category": "external",
        "summary": "2500539",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500539"
      },
      {
        "category": "external",
        "summary": "2500540",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500540"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57348.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-08-21T20:15:32+00:00",
      "generator": {
        "date": "2026-08-21T20:15:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:57348",
      "initial_release_date": "2026-08-20T07:34:06+00:00",
      "revision_history": [
        {
          "date": "2026-08-20T07:34:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-20T07:34:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-21T20:15:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.4::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.52.5-1.el8_4.src",
                "product": {
                  "name": "webkit2gtk3-0:2.52.5-1.el8_4.src",
                  "product_id": "webkit2gtk3-0:2.52.5-1.el8_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.52.5-1.el8_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.52.5-1.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.52.5-1.el8_4?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.52.5-1.el8_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.52.5-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src"
        },
        "product_reference": "webkit2gtk3-0:2.52.5-1.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.52.5-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src"
        },
        "product_reference": "webkit2gtk3-0:2.52.5-1.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Thomas Rinsma of Codean Labs"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2024-4367",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "discovery_date": "2024-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2280382"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Arbitrary JavaScript execution in PDF.js",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-4367"
        },
        {
          "category": "external",
          "summary": "RHBZ#2280382",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2280382"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-4367",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-4367"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4367",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4367"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/#CVE-2024-4367",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/#CVE-2024-4367"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/#CVE-2024-4367",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/#CVE-2024-4367"
        }
      ],
      "release_date": "2024-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Arbitrary JavaScript execution in PDF.js"
    },
    {
      "cve": "CVE-2026-39872",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500519"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39872"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500519",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500519"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39872",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39872"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39872",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39872"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313528",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313528"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43663",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500520"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43663"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500520",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500520"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43663",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43663"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43663",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43663"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=312781",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=312781"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43676",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500521"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43676"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500521",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500521"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43676",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43676"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43676",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43676"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=317231",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=317231"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43699",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500522"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43699"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500522",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500522"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43699",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43699"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43699",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43699"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=317227",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=317227"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43701",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500523"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper checks, potentially allowing access to resources that should be restricted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43701"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500523",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500523"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43701",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43701"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43701",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43701"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=315004",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=315004"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox"
    },
    {
      "cve": "CVE-2026-43705",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a type confusion due to improper checks, leading to memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43705"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43705",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43705"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43705",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43705"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=314528",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=314528"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2026-43707",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500525"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger memory corruption due to improper memory handling, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43707"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500525",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500525"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43707",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43707"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43707",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43707"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=315951",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=315951"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43712",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500526"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper memory handling, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43712"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500526",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500526"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43712",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43712"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43712",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43712"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=314235",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=314235"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43713",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500527"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Visiting a website can leak sensitive data due to a permissions issue that was addressed with additional restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Visiting a website may leak sensitive data",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43713"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500527",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500527"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43713",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43713"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43713",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43713"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=314806",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=314806"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Visiting a website may leak sensitive data"
    },
    {
      "cve": "CVE-2026-43715",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43715"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43715",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43715"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43715",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43715"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313577",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313577"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2026-43716",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500529"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43716"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500529",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500529"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43716",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43716"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43716",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43716"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313473",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313473"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43720",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500530"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43720"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500530",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500530"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43720",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43720"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43720",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43720"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313175",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313175"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43721",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500531"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43721"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500531",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500531"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43721"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313478",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313478"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data"
    },
    {
      "cve": "CVE-2026-43725",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500532"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper input validation, potentially allowing access to resources that should be restricted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43725"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500532",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500532"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43725",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43725"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43725",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43725"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=312832",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=312832"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox"
    },
    {
      "cve": "CVE-2026-43726",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500533"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43726"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500533",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500533"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43726",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43726"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43726",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43726"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313857",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313857"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43727",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500534"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500534",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500534"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43727"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313691",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313691"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43731",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500535"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43731"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500535",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500535"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43731",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43731"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43731",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43731"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=314115",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=314115"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2026-43732",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500536"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43732"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500536",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500536"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43732",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43732"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43732",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43732"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313085",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313085"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information"
    },
    {
      "cve": "CVE-2026-43734",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500537"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43734"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500537",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500537"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43734"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=313693",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=313693"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43740",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500538"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, leading to disclosure of process memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500538",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500538"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43740"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=308046",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=308046"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory"
    },
    {
      "cve": "CVE-2026-43742",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500539"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43742"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500539",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500539"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43742",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43742"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43742",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43742"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=315161",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=315161"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-43745",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500540"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43745"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500540",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500540"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43745",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43745"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43745",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43745"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=315365",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=315365"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0004.html"
        }
      ],
      "release_date": "2026-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash"
    },
    {
      "cve": "CVE-2026-64787",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-08-20T12:53:49.325000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520320"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process termination but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64787"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520320",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520320"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64787",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64787",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64787"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T07:34:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57348"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.52.5-1.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.52.5-1.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination"
    }
  ]
}

CVE-2024-4367 (GCVE-0-2024-4367)

Vulnerability from cvelistv5 – Published: 2024-05-14 17:21 – Updated: 2026-05-12 11:30

Summary

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-26 04:55 UTC

CWE

Arbitrary JavaScript execution in PDF.js
CWE-754 - Improper Check for Unusual or Exceptional Conditions

Assigner

mozilla mitre root

References

12 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1893645
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://lists.debian.org/debian-lts-announce/2024…
https://lists.debian.org/debian-lts-announce/2024…
http://seclists.org/fulldisclosure/2024/Aug/30
https://github.com/mozilla/pdf.js/releases/tag/v4.2.67
https://codeanlabs.com/blog/research/cve-2024-436…
https://github.com/gogs/gogs/issues/7928
https://www.exploit-db.com/exploits/52273
https://cert-portal.siemens.com/productcert/html/…

Impacted products

9 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 126 (custom)
Mozilla	Firefox ESR	Affected: unspecified , < 115.11 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 115.11 (custom)
mozilla	thunderbird	Affected: 0 , < 115.11 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*
mozilla	firefox	Affected: 0 , < 126 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	firefox_esr	Affected: 0 , < 115.11 (custom) cpe:2.3:a:mozilla:firefox_esr:-:::::::*
Siemens	Teamcenter V2312	Affected: 0 , < V2312.0009 (custom)
Siemens	Teamcenter V2406	Affected: 0 , < V2406.0006 (custom)
Siemens	Teamcenter V2512	Unaffected: 0 , < * (custom)

Credits

Thomas Rinsma of Codean Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "126",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-4367",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-26T04:55:26.634778Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-754",
                "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T14:44:59.422Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-24T18:19:17.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2024/Aug/30"
          },
          {
            "url": "https://github.com/mozilla/pdf.js/releases/tag/v4.2.67"
          },
          {
            "url": "https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/"
          },
          {
            "url": "https://github.com/gogs/gogs/issues/7928"
          },
          {
            "url": "https://www.exploit-db.com/exploits/52273"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1893645"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2312",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2312.0009",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2406",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2406.0006",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2512",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:30:41.220Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-827383.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "126",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thomas Rinsma of Codean Labs"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox \u003c 126, Firefox ESR \u003c 115.11, and Thunderbird \u003c 115.11."
            }
          ],
          "value": "A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox \u003c 126, Firefox ESR \u003c 115.11, and Thunderbird \u003c 115.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Arbitrary JavaScript execution in PDF.js",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-10T16:07:35.289Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1893645"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-4367",
    "datePublished": "2024-05-14T17:21:23.486Z",
    "dateReserved": "2024-04-30T19:08:43.037Z",
    "dateUpdated": "2026-05-12T11:30:41.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39872 (GCVE-0-2026-39872)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:43 – Updated: 2026-08-17 21:31

Summary

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-29 21:45 UTC

CWE

Processing maliciously crafted web content may lead to an unexpected process crash
CWE-416 - Use After Free
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.7.10 (custom) Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39872",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-29T21:45:48.254822Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-29T21:46:17.113Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:31:12.481Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "url": "https://support.apple.com/en-us/148287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-39872",
    "datePublished": "2026-06-29T19:43:09.579Z",
    "dateReserved": "2026-04-07T19:58:20.173Z",
    "dateUpdated": "2026-08-17T21:31:12.481Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43663 (GCVE-0-2026-43663)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:43 – Updated: 2026-08-17 21:31

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-29 21:48 UTC

CWE

Processing maliciously crafted web content may lead to an unexpected process crash
CWE-416 - Use After Free
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.7.10 (custom) Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43663",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-29T21:48:12.332846Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-29T21:48:16.265Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:31:02.192Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "url": "https://support.apple.com/en-us/148287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43663",
    "datePublished": "2026-06-29T19:43:05.979Z",
    "dateReserved": "2026-05-01T22:46:21.639Z",
    "dateUpdated": "2026-08-17T21:31:02.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43676 (GCVE-0-2026-43676)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:42 – Updated: 2026-08-17 21:29

Summary

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-29 21:37 UTC

CWE

Processing maliciously crafted web content may lead to an unexpected Safari crash
CWE-125 - Out-of-bounds Read
CWE-787 - Out-of-bounds Write

Assigner

apple mitre root

References

6 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Impacted products

5 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.7.10 (custom) Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43676",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-29T21:37:37.556639Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-29T21:38:05.256Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:29:55.599Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "url": "https://support.apple.com/en-us/148287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43676",
    "datePublished": "2026-06-29T19:42:50.886Z",
    "dateReserved": "2026-05-01T22:46:21.641Z",
    "dateUpdated": "2026-08-17T21:29:55.599Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43699 (GCVE-0-2026-43699)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:42 – Updated: 2026-08-17 21:29

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-29 21:37 UTC

CWE

Processing maliciously crafted web content may lead to an unexpected process crash
CWE-416 - Use After Free

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.7.10 (custom) Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43699",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-29T21:37:16.494254Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-29T21:37:21.158Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:29:56.752Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "url": "https://support.apple.com/en-us/148287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43699",
    "datePublished": "2026-06-29T19:42:51.754Z",
    "dateReserved": "2026-05-01T22:46:21.643Z",
    "dateUpdated": "2026-08-17T21:29:56.752Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43701 (GCVE-0-2026-43701)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:43 – Updated: 2026-08-17 21:31

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-30 20:02 UTC

CWE

A malicious website may be able to process restricted web content outside the sandbox
CWE-284 - Improper Access Control

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.7.10 (custom) Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43701",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T20:02:10.034767Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T20:02:12.384Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to process restricted web content outside the sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:31:09.323Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "url": "https://support.apple.com/en-us/148287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43701",
    "datePublished": "2026-06-29T19:43:06.947Z",
    "dateReserved": "2026-05-01T22:46:21.643Z",
    "dateUpdated": "2026-08-17T21:31:09.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43705 (GCVE-0-2026-43705)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:42 – Updated: 2026-08-17 21:30

Summary

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-29 00:00 UTC

CWE

Processing maliciously crafted web content may lead to memory corruption
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.7.10 (custom) Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43705",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-29T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T03:55:38.904Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:30:12.489Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "url": "https://support.apple.com/en-us/148287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43705",
    "datePublished": "2026-06-29T19:42:54.457Z",
    "dateReserved": "2026-05-01T22:46:21.643Z",
    "dateUpdated": "2026-08-17T21:30:12.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43707 (GCVE-0-2026-43707)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:43 – Updated: 2026-07-27 20:13

Summary

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-30 20:02 UTC

CWE

Processing maliciously crafted web content may lead to an unexpected process crash
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

apple mitre root

References

6 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43707",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T20:02:36.518496Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T20:02:40.077Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T20:13:47.101Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43707",
    "datePublished": "2026-06-29T19:43:02.426Z",
    "dateReserved": "2026-05-01T22:46:21.644Z",
    "dateUpdated": "2026-07-27T20:13:47.101Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43712 (GCVE-0-2026-43712)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:42 – Updated: 2026-07-27 20:13

Summary

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-29 21:29 UTC

CWE

Processing maliciously crafted web content may lead to an unexpected process crash
CWE-787 - Out-of-bounds Write
CWE-125 - Out-of-bounds Read

Assigner

apple mitre root

References

6 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43712",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-29T21:29:22.559291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-29T21:29:27.255Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T20:13:14.048Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43712",
    "datePublished": "2026-06-29T19:42:56.984Z",
    "dateReserved": "2026-05-01T22:46:21.644Z",
    "dateUpdated": "2026-07-27T20:13:14.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43713 (GCVE-0-2026-43713)

Vulnerability from cvelistv5 – Published: 2026-06-29 19:42 – Updated: 2026-07-27 20:13

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-30 14:38 UTC

CWE

Visiting a website may leak sensitive data
CWE-284 - Improper Access Control

Assigner

apple mitre root

References

6 references

URL	Tags
https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070

Impacted products

6 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 26.5.2 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 26.5.2 (custom)
Apple	macOS	Affected: 0 , < 26.5.2 (custom)
Apple	tvOS	Affected: 0 , < 26.6 (custom)
Apple	visionOS	Affected: 0 , < 26.6 (custom)
Apple	watchOS	Affected: 0 , < 26.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43713",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T14:38:11.012330Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T20:04:23.762Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a website may leak sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T20:13:05.129Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127594"
        },
        {
          "url": "https://support.apple.com/en-us/127595"
        },
        {
          "url": "https://support.apple.com/en-us/127685"
        },
        {
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "url": "https://support.apple.com/en-us/128070"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-43713",
    "datePublished": "2026-06-29T19:42:53.590Z",
    "dateReserved": "2026-05-01T22:46:21.644Z",
    "dateUpdated": "2026-07-27T20:13:05.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:57348

CVE-2024-4367 (GCVE-0-2024-4367)

CVE-2026-39872 (GCVE-0-2026-39872)

CVE-2026-43663 (GCVE-0-2026-43663)

CVE-2026-43676 (GCVE-0-2026-43676)

CVE-2026-43699 (GCVE-0-2026-43699)

CVE-2026-43701 (GCVE-0-2026-43701)

CVE-2026-43705 (GCVE-0-2026-43705)

CVE-2026-43707 (GCVE-0-2026-43707)

CVE-2026-43712 (GCVE-0-2026-43712)

CVE-2026-43713 (GCVE-0-2026-43713)

Tags

Sightings

Nomenclature