https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:31:13.498354+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:9144 ALSA-2024:9144 — Important: webkit2gtk3 security update 2026-10-03T16:31:13.648201+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843) * webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950) * webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956) * chromium-browser: Use after free in ANGLE (CVE-2024-4558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-06922 bdu:2024-06922 2026-10-03T16:31:13.648275+00:00 bdu:2024-06922 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0883 certfr-2024-avi-0883 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-03T16:31:13.648293+00:00 certfr-2024-avi-0883 https://cve.radiocsirt.org/vuln/euvd-2026-216842 EUVD-2026-216842 2026-10-03T16:31:13.648309+00:00 EUVD-2026-216842 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42956 fkie_cve-2023-42956 2026-10-03T16:31:13.648320+00:00

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.

 https://cve.radiocsirt.org/vuln/ghsa-jprr-pf4r-gvp5 GHSA-jprr-pf4r-gvp5 2026-10-03T16:31:13.648342+00:00

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.

 https://cve.radiocsirt.org/vuln/gsd-2023-42956 gsd-2023-42956 2026-10-03T16:31:13.648356+00:00 gsd-2023-42956 https://cve.radiocsirt.org/vuln/rhsa-2024:9144 RHSA-2024:9144 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T16:31:13.648366+00:00

webkit: visiting a malicious website may lead to address bar spoofing webkit: heap use-after-free may lead to arbitrary code execution webkit: processing malicious web content may lead to a denial of service webkitgtk: Processing maliciously crafted web content may lead to memory corruption chromium-browser: Use after free in ANGLE

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-03T16:31:13.648438+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/suse-su-2024:1269-1 SUSE-SU-2024:1269-1 — Security update for webkit2gtk3 2026-10-03T16:31:13.648796+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42956 UBUNTU-CVE-2023-42956 2026-10-03T16:31:13.648817+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 5 more

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3094 WID-SEC-W-2023-3094 — Apple macOS: Mehrere Schwachstellen 2026-10-03T16:31:13.648857+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.