https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:54:45.019332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:8180 ALSA-2024:8180 — Important: webkit2gtk3 security update 2026-10-02T23:54:45.218255+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779) * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782) * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866) * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-09452 bdu:2024-09452 2026-10-02T23:54:45.218339+00:00 bdu:2024-09452 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0304 certfr-2025-avi-0304 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-02T23:54:45.218357+00:00 certfr-2025-avi-0304 https://cve.radiocsirt.org/vuln/euvd-2026-279341 EUVD-2026-279341 2026-10-02T23:54:45.218374+00:00 EUVD-2026-279341 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23271 fkie_cve-2024-23271 2026-10-02T23:54:45.218385+00:00

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

 https://cve.radiocsirt.org/vuln/ghsa-c7hr-m654-77g5 GHSA-c7hr-m654-77g5 2026-10-02T23:54:45.218407+00:00

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

 https://cve.radiocsirt.org/vuln/gsd-2024-23271 gsd-2024-23271 2026-10-02T23:54:45.218422+00:00 gsd-2024-23271 https://cve.radiocsirt.org/vuln/rhsa-2024:2126 RHSA-2024:2126 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-02T23:54:45.218433+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: User password may be read aloud by a text-to-speech accessibility feature webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Processing web content may lead to a denial of service webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: processing a malicious image may lead to a denial of service webkitgtk: processing malicious web content may lead to arbitrary code execution webkitgtk: Arbitrary Remote Code Execution webkitgtk: Processing web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: A malicious website may cause unexpected cross-origin behavior

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-02T23:54:45.218470+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/suse-su-2024:3751-1 SUSE-SU-2024:3751-1 — Security update for webkit2gtk3 2026-10-02T23:54:45.218835+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23271 UBUNTU-CVE-2024-23271 2026-10-02T23:54:45.218859+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 5 more

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0173 WID-SEC-W-2024-0173 — Apple Safari: Mehrere Schwachstellen 2026-10-02T23:54:45.218899+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um beliebigen Programmcode auszuführen.