https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:41:27.491882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6535 ALSA-2023:6535 — Important: webkit2gtk3 security and bug fix update 2026-10-04T03:41:27.534498+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: arbitrary code execution (CVE-2023-32393) * webkitgtk: bypass Same Origin Policy (CVE-2023-38572) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592) * webkitgtk: arbitrary code execution (CVE-2023-38594) * webkitgtk: arbitrary code execution (CVE-2023-38595) * webkitgtk: arbitrary code execution (CVE-2023-38597) * webkitgtk: arbitrary code execution (CVE-2023-38600) * webkitgtk: arbitrary code execution (CVE-2023-38611) * webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885) * webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932) * webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954) * webkitgtk: use after free vulnerability (CVE-2023-28198) * webkitgtk: content security policy blacklist failure (CVE-2023-32370) * webkitgtk: disclose sensitive information (CVE-2023-38133) * webkitgtk: track sensitive user information (CVE-2023-38599) * webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434) * webkitgtk: arbitrary javascript code execution (CVE-2023-40397) * webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s…

 https://cve.radiocsirt.org/vuln/bdu:2023-06727 bdu:2023-06727 2026-10-04T03:41:27.534578+00:00 bdu:2023-06727 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0784 certfr-2023-avi-0784 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Apple</span>. Certaines d'entre… 2026-10-04T03:41:27.534596+00:00 certfr-2023-avi-0784 https://cve.radiocsirt.org/vuln/euvd-2026-236612 EUVD-2026-236612 2026-10-04T03:41:27.534612+00:00 EUVD-2026-236612 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39434 fkie_cve-2023-39434 2026-10-04T03:41:27.534623+00:00

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-84c6-x9x8-7q38 GHSA-84c6-x9x8-7q38 2026-10-04T03:41:27.534643+00:00

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/gsd-2023-39434 gsd-2023-39434 2026-10-04T03:41:27.534657+00:00 gsd-2023-39434 https://cve.radiocsirt.org/vuln/rhsa-2023:6535 RHSA-2023:6535 — Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update 2026-10-04T03:41:27.534667+00:00

webkitgtk: Memory corruption issue when processing web content webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing. webkitgtk: A website may able to track visited websites in private browsing webkitgtk: Visiting a malicious website may lead to address bar spoofing webkitgtk: Visiting a malicious website may lead to address bar spoofing. webkitgtk: Same Origin Policy bypass via crafted web content webkitgtk: Website may be able to track sensitive user information webkitgtk: use after free vulnerability webkitgtk: content security policy blacklist failure webkitgtk: arbitrary code execution webkitgtk: disclose sensitive information webkitgtk: bypass Same Origin Policy webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: arbitrary code execution webkitgtk: arbitrary code execution webkitgtk: arbitrary code execution webkitgtk: track sensitive user information webkitgtk: arbitrary code execution webkitgtk: arbitrary code execution webkitgtk: arbitrary javascript code execution webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code webkitgtk: Processing web content may lead to arbitrary code execution

 https://cve.radiocsirt.org/vuln/suse-su-2023:4209-1 SUSE-SU-2023:4209-1 — Security update for webkit2gtk3 2026-10-04T03:41:27.534715+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39434 UBUNTU-CVE-2023-39434 2026-10-04T03:41:27.534732+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 5 more

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2453 WID-SEC-W-2023-2453 — Apple macOS: Mehrere Schwachstellen 2026-10-04T03:41:27.534769+00:00

Ein entfernter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Rechte zu erweitern oder Daten zu manipulieren.