https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:06:18.342363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:2034 ALSA-2025:2034 — Important: webkit2gtk3 security update 2026-10-03T14:06:18.450131+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54543) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2025-24143) * webkitgtk: Copying a URL from Web Inspector may lead to command injection (CVE-2025-24150) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-24158) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-01558 bdu:2025-01558 2026-10-03T14:06:18.450202+00:00 bdu:2025-01558 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0075 certfr-2025-avi-0075 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-03T14:06:18.450219+00:00 certfr-2025-avi-0075 https://cve.radiocsirt.org/vuln/euvd-2026-279851 EUVD-2026-279851 2026-10-03T14:06:18.450236+00:00 EUVD-2026-279851 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24150 fkie_cve-2025-24150 2026-10-03T14:06:18.450246+00:00

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection.

 https://cve.radiocsirt.org/vuln/ghsa-qmjg-q5x7-48p2 GHSA-qmjg-q5x7-48p2 2026-10-03T14:06:18.450267+00:00

A privacy issue was addressed with improved handling of files. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Copying a URL from Web Inspector may lead to command injection.

 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update 2026-10-03T14:06:18.450282+00:00

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…

 https://cve.radiocsirt.org/vuln/rhsa-2025:2034 RHSA-2025:2034 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T14:06:18.450635+00:00

webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: A maliciously crafted webpage may be able to fingerprint the user webkitgtk: Copying a URL from Web Inspector may lead to command injection webkitgtk: Processing web content may lead to a denial-of-service webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

 https://cve.radiocsirt.org/vuln/suse-su-2025:0639-1 SUSE-SU-2025:0639-1 — Security update for webkit2gtk3 2026-10-03T14:06:18.450667+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24150 UBUNTU-CVE-2025-24150 2026-10-03T14:06:18.450687+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 6 more

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0199 WID-SEC-W-2025-0199 — Apple Safari: Mehrere Schwachstellen 2026-10-03T14:06:18.450727+00:00

Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um die Authentifizierung zu umgehen, einen Spoofing-Angriff durchzuführen, vertrauliche Informationen preiszugeben, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuführen.