https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:16:59.588811+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1586 ALSA-2021:1586 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-04T04:16:59.709581+00:00

Affected: AlmaLinux:8: OpenEXR-devel, AlmaLinux:8: OpenEXR-libs, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: atkmm, AlmaLinux:8: atkmm-devel, AlmaLinux:8: atkmm-doc, AlmaLinux:8: cairomm, AlmaLinux:8: cairomm-devel, AlmaLinux:8: cairomm-doc, AlmaLinux:8: chrome-gnome-shell and 71 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

* glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-07049 bdu:2022-07049 2026-10-04T04:16:59.709734+00:00 bdu:2022-07049 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T04:16:59.709753+00:00 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/cnvd-2022-06525 cnvd-2022-06525 2026-10-04T04:16:59.709770+00:00 cnvd-2022-06525 https://cve.radiocsirt.org/vuln/euvd-2026-41841 EUVD-2026-41841 2026-10-04T04:16:59.709782+00:00 EUVD-2026-41841 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13543 fkie_cve-2020-13543 2026-10-04T04:16:59.709793+00:00

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-mqwf-vg2c-5ch3 GHSA-mqwf-vg2c-5ch3 2026-10-04T04:16:59.709815+00:00

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2020-13543 gsd-2020-13543 2026-10-04T04:16:59.709830+00:00 gsd-2020-13543 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2304-1 openSUSE-SU-2020:2304-1 — Security update for webkit2gtk3 2026-10-04T04:16:59.709841+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-04T04:16:59.709860+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/suse-su-2020:3864-1 SUSE-SU-2020:3864-1 — Security update for webkit2gtk3 2026-10-04T04:16:59.710205+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13543 UBUNTU-CVE-2020-13543 2026-10-04T04:16:59.710226+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 4 more

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-04T04:16:59.710263+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.