https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:42:39.969687+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1777 ALSA-2022:1777 — Moderate: webkit2gtk3 security, bug fix, and enhancement update 2026-10-02T19:42:40.105088+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042)

Security Fix(es):

* webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free (CVE-2022-22620)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30809)

* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-30818)

* webkitgtk: Logic issue leading to HSTS bypass (CVE-2021-30823)

* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30846)

* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30848)

* webkitgtk: Multiple memory corruption issue leading to arbitrary code execution (CVE-2021-30849)

* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30851)

* webkitgtk: Logic issue leading to Content Security Policy bypass (CVE-2021-30887)

* webkitgtk: Information leak via Content Security Policy reports (CVE-2021-30888)

* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2021-30889)

* webkitgtk: Logic issue leading to universal cross-site scripting (CVE-2021-30890)

* webkitgtk: Cross-origin data exfiltration via resource timing API (CVE-2021-30897)

* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30934)

* webkitgtk: Process…

 https://cve.radiocsirt.org/vuln/bdu:2022-05721 bdu:2022-05721 2026-10-02T19:42:40.105182+00:00 bdu:2022-05721 https://cve.radiocsirt.org/vuln/certfr-2022-avi-088 certfr-2022-avi-088 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T19:42:40.105200+00:00 certfr-2022-avi-088 https://cve.radiocsirt.org/vuln/euvd-2026-13455 EUVD-2026-13455 2026-10-02T19:42:40.105216+00:00 EUVD-2026-13455 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22589 fkie_cve-2022-22589 2026-10-02T19:42:40.105228+00:00

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.

 https://cve.radiocsirt.org/vuln/ghsa-4c33-fwgf-qv6r GHSA-4c33-fwgf-qv6r 2026-10-02T19:42:40.105250+00:00

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.

 https://cve.radiocsirt.org/vuln/gsd-2022-22589 gsd-2022-22589 2026-10-02T19:42:40.105265+00:00 gsd-2022-22589 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0705-1 openSUSE-SU-2022:0705-1 — Security update for webkit2gtk3 2026-10-02T19:42:40.105274+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-02T19:42:40.105298+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/suse-su-2022:0690-1 SUSE-SU-2022:0690-1 — Security update for webkit2gtk3 2026-10-02T19:42:40.105580+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22589 UBUNTU-CVE-2022-22589 2026-10-02T19:42:40.105604+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 5 more

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1057 WID-SEC-W-2022-1057 — Apple macOS: Mehrere Schwachstellen 2026-10-02T19:42:40.105643+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen und im schlimmsten Fall das System zu kompromittieren.