https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:54:57.428415+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:10472 ALSA-2024:10472 — Important: webkit2gtk3 security update 2026-10-03T21:54:57.635463+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-10240 bdu:2024-10240 2026-10-03T21:54:57.635573+00:00 bdu:2024-10240 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1004 certfr-2024-avi-1004 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer u… 2026-10-03T21:54:57.635594+00:00 certfr-2024-avi-1004 https://cve.radiocsirt.org/vuln/euvd-2026-279979 EUVD-2026-279979 2026-10-03T21:54:57.635611+00:00 EUVD-2026-279979 https://cve.radiocsirt.org/vuln/fkie_cve-2024-44309 fkie_cve-2024-44309 2026-10-03T21:54:57.635623+00:00

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

 https://cve.radiocsirt.org/vuln/ghsa-6cpp-mpjx-cx8v GHSA-6cpp-mpjx-cx8v 2026-10-03T21:54:57.635647+00:00

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

 https://cve.radiocsirt.org/vuln/rhsa-2024:10472 RHSA-2024:10472 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T21:54:57.635663+00:00

webkitgtk: data isolation bypass vulnerability

 https://cve.radiocsirt.org/vuln/rhsa-2024:10480 RHSA-2024:10480 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T21:54:57.635689+00:00

webkitgtk: data isolation bypass vulnerability

 https://cve.radiocsirt.org/vuln/suse-su-2024:4167-1 SUSE-SU-2024:4167-1 — Security update for webkit2gtk3 2026-10-03T21:54:57.635718+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-44309 UBUNTU-CVE-2024-44309 2026-10-03T21:54:57.635753+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 6 more

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3503 WID-SEC-W-2024-3503 — Apple Safari, iOS, iPadOS, macOS: Mehrere Schwachstellen 2026-10-03T21:54:57.635809+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari, Apple iOS, Apple iPadOS und Apple macOS ausnutzen, um beliebigen Programmcode auszuführen und einen Cross-Site-Scripting-Angriff durchzuführen.