https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:12:19.296275+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:13780 ALSA-2025:13780 — Important: webkit2gtk3 security update 2026-10-02T14:12:19.325698+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* angle: insufficient input validation can cause undefined behavior (CVE-2025-6558) * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-09740 bdu:2025-09740 2026-10-02T14:12:19.325771+00:00 bdu:2025-09740 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0640 certfr-2025-avi-0640 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T14:12:19.325789+00:00 certfr-2025-avi-0640 https://cve.radiocsirt.org/vuln/euvd-2026-279304 EUVD-2026-279304 2026-10-02T14:12:19.325805+00:00 EUVD-2026-279304 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31273 fkie_cve-2025-31273 2026-10-02T14:12:19.325816+00:00

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

 https://cve.radiocsirt.org/vuln/ghsa-wvw8-3gm3-qgrg GHSA-wvw8-3gm3-qgrg 2026-10-02T14:12:19.325838+00:00

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption.

 https://cve.radiocsirt.org/vuln/rhsa-2025:13780 RHSA-2025:13780 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-02T14:12:19.325853+00:00

angle: insufficient input validation can cause undefined behavior webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing web content may lead to a denial-of-service webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may disclose sensitive user information webkitgtk: A download’s origin may be incorrectly associated webkitgtk: Processing maliciously crafted web content may disclose internal states of the app

 https://cve.radiocsirt.org/vuln/rhsa-2025:14421 RHSA-2025:14421 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-02T14:12:19.325891+00:00

angle: insufficient input validation can cause undefined behavior webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing web content may lead to a denial-of-service webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may disclose sensitive user information webkitgtk: A download’s origin may be incorrectly associated webkitgtk: Processing maliciously crafted web content may disclose internal states of the app

 https://cve.radiocsirt.org/vuln/suse-su-2025:02766-1 SUSE-SU-2025:02766-1 — Security update for webkit2gtk3 2026-10-02T14:12:19.325925+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-31273 UBUNTU-CVE-2025-31273 2026-10-02T14:12:19.325948+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 6 more

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1668 WID-SEC-W-2025-1668 — Apple iOS und iPadOS: Mehrere Schwachstellen 2026-10-02T14:12:19.325989+00:00

Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um weitere, nicht spezifizierte Auswirkungen zu verursachen.