https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:18:00.634182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2126 ALSA-2024:2126 — Important: webkit2gtk3 security update 2026-10-03T07:18:01.107952+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213) * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745) * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359) * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928) * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983) * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883) * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2014-00330 bdu:2014-00330 2026-10-03T07:18:01.108035+00:00 bdu:2014-00330 https://cve.radiocsirt.org/vuln/certfr-2014-avi-236 certfr-2014-avi-236 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Google Chrome</span>. Certaines d'entre elles p… 2026-10-03T07:18:01.108055+00:00 certfr-2014-avi-236 https://cve.radiocsirt.org/vuln/euvd-2026-242993 EUVD-2026-242993 2026-10-03T07:18:01.108073+00:00 EUVD-2026-242993 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1745 fkie_cve-2014-1745 2026-10-03T07:18:01.108085+00:00

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

 https://cve.radiocsirt.org/vuln/ghsa-pr96-m2pj-3g36 GHSA-pr96-m2pj-3g36 2026-10-03T07:18:01.108109+00:00

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

 https://cve.radiocsirt.org/vuln/gsd-2014-1745 gsd-2014-1745 2026-10-03T07:18:01.108124+00:00 gsd-2014-1745 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 openSUSE-SU-2024:10171-1 — chromedriver-55.0.2883.75-3.1 on GA media 2026-10-03T07:18:01.108142+00:00

chromedriver-55.0.2883.75-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-03T07:18:01.108501+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/suse-su-2024:0519-1 SUSE-SU-2024:0519-1 — Security update for webkit2gtk3 2026-10-03T07:18:01.108797+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1745 UBUNTU-CVE-2014-1745 2026-10-03T07:18:01.108819+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1213 WID-SEC-W-2024-1213 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T07:18:01.108840+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.