https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:33:49.130051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:22789 ALSA-2025:22789 — Important: webkit2gtk3 security update 2026-10-03T22:33:49.416831+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000) * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440) * webkitgtk: Processing maliciously crafted web content may lea…

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0280 certfr-2026-avi-0280 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer u… 2026-10-03T22:33:49.417000+00:00 certfr-2026-avi-0280 https://cve.radiocsirt.org/vuln/euvd-2026-373161 EUVD-2026-373161 2026-10-03T22:33:49.417038+00:00 EUVD-2026-373161 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43000 fkie_cve-2023-43000 2026-10-03T22:33:49.417052+00:00

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

 https://cve.radiocsirt.org/vuln/ghsa-96ff-3rwm-724g GHSA-96ff-3rwm-724g 2026-10-03T22:33:49.417077+00:00

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.

 https://cve.radiocsirt.org/vuln/gsd-2023-43000 gsd-2023-43000 2026-10-03T22:33:49.417093+00:00 gsd-2023-43000 https://cve.radiocsirt.org/vuln/ncsc-2026-0098 NCSC-2026-0098 — Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-10-03T22:33:49.417105+00:00 NCSC-2026-0098 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20065-1 openSUSE-SU-2026:20065-1 — Security update for webkit2gtk3 2026-10-03T22:33:49.417126+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/rhsa-2024:8492 RHSA-2024:8492 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T22:33:49.417162+00:00

webkitgtk: Memory corruption issue when processing web content webkitgtk: arbitrary javascript code execution webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Arbitrary Remote Code Execution webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing maliciously crafted web content may lead to memory corruption chromium-browser: Use after free in ANGLE webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash webkit: Processing maliciously crafted web content may lead to memory corruption webkitgtk: A malicious website may exfiltrate data cross-origin

 https://cve.radiocsirt.org/vuln/suse-su-2025:4423-1 SUSE-SU-2025:4423-1 — Security update for webkit2gtk3 2026-10-03T22:33:49.417214+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43000 UBUNTU-CVE-2023-43000 2026-10-03T22:33:49.417241+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 5 more

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2657 WID-SEC-W-2025-2657 — WebKitGTK: Mehrere Schwachstellen 2026-10-03T22:33:49.417281+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um Memory Corruption, Prozessabstürze (DoS) oder Cross-Origin-Datenexfiltration zu verursachen oder potentiell Code auszuführen.