https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:14:53.243745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:13780 ALSA-2025:13780 — Important: webkit2gtk3 security update 2026-10-03T15:14:53.282605+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* angle: insufficient input validation can cause undefined behavior (CVE-2025-6558) * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-11471 bdu:2025-11471 2026-10-03T15:14:53.282682+00:00 bdu:2025-11471 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0640 certfr-2025-avi-0640 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-03T15:14:53.282700+00:00 certfr-2025-avi-0640 https://cve.radiocsirt.org/vuln/euvd-2026-279876 EUVD-2026-279876 2026-10-03T15:14:53.282717+00:00 EUVD-2026-279876 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43240 fkie_cve-2025-43240 2026-10-03T15:14:53.282728+00:00

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.

 https://cve.radiocsirt.org/vuln/ghsa-2c58-jp5q-q38f GHSA-2c58-jp5q-q38f 2026-10-03T15:14:53.282750+00:00

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. A download's origin may be incorrectly associated.

 https://cve.radiocsirt.org/vuln/rhsa-2025:13780 RHSA-2025:13780 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T15:14:53.282764+00:00

angle: insufficient input validation can cause undefined behavior webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing web content may lead to a denial-of-service webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may disclose sensitive user information webkitgtk: A download’s origin may be incorrectly associated webkitgtk: Processing maliciously crafted web content may disclose internal states of the app

 https://cve.radiocsirt.org/vuln/rhsa-2025:14421 RHSA-2025:14421 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-03T15:14:53.282802+00:00

angle: insufficient input validation can cause undefined behavior webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing maliciously crafted web content may lead to memory corruption webkitgtk: Processing web content may lead to a denial-of-service webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash webkitgtk: Processing maliciously crafted web content may disclose sensitive user information webkitgtk: A download’s origin may be incorrectly associated webkitgtk: Processing maliciously crafted web content may disclose internal states of the app

 https://cve.radiocsirt.org/vuln/suse-su-2025:02766-1 SUSE-SU-2025:02766-1 — Security update for webkit2gtk3 2026-10-03T15:14:53.282834+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-43240 UBUNTU-CVE-2025-43240 2026-10-03T15:14:53.282855+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 6 more

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1672 WID-SEC-W-2025-1672 — Apple macOS Sequoia, Sonoma und Ventura: Mehrere Schwachstellen 2026-10-03T15:14:53.282892+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS Sequoia, Sonoma und Ventura ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Daten zu verändern oder Sicherheitsmaßnahmen zu umgehen.