https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:36:58.672514+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1586 ALSA-2021:1586 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-03T07:36:59.025058+00:00

Affected: AlmaLinux:8: OpenEXR-devel, AlmaLinux:8: OpenEXR-libs, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: atkmm, AlmaLinux:8: atkmm-devel, AlmaLinux:8: atkmm-doc, AlmaLinux:8: cairomm, AlmaLinux:8: cairomm-devel, AlmaLinux:8: cairomm-doc, AlmaLinux:8: chrome-gnome-shell and 71 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

* glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-04784 bdu:2020-04784 2026-10-03T07:36:59.025238+00:00 bdu:2020-04784 https://cve.radiocsirt.org/vuln/certfr-2020-avi-598 certfr-2020-avi-598 — De multiples vulnérabilités ont été découvertes dans Apple Safari. Elles permettent à un attaquant de provoquer une exé… 2026-10-03T07:36:59.025260+00:00 certfr-2020-avi-598 https://cve.radiocsirt.org/vuln/cnvd-2020-57852 cnvd-2020-57852 2026-10-03T07:36:59.025277+00:00 cnvd-2020-57852 https://cve.radiocsirt.org/vuln/euvd-2026-39512 EUVD-2026-39512 2026-10-03T07:36:59.025290+00:00 EUVD-2026-39512 https://cve.radiocsirt.org/vuln/fkie_cve-2020-9948 fkie_cve-2020-9948 2026-10-03T07:36:59.025301+00:00

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-f937-gh67-6x56 GHSA-f937-gh67-6x56 2026-10-03T07:36:59.025323+00:00

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/gsd-2020-9948 gsd-2020-9948 2026-10-03T07:36:59.025337+00:00 gsd-2020-9948 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2304-1 openSUSE-SU-2020:2304-1 — Security update for webkit2gtk3 2026-10-03T07:36:59.025347+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-03T07:36:59.025369+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/suse-su-2020:3864-1 SUSE-SU-2020:3864-1 — Security update for webkit2gtk3 2026-10-03T07:36:59.025737+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-9948 UBUNTU-CVE-2020-9948 2026-10-03T07:36:59.025757+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 3 more

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-03T07:36:59.025797+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.