https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:50:29 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:1777 <p><strong>Affected:</strong> AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042)</p> <p>Security Fix(es):</p> <p>* webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free (CVE-2022-22620)</p> <p>* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30809)</p> <p>* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-30818)</p> <p>* webkitgtk: Logic issue leading to HSTS bypass (CVE-2021-30823)</p> <p>* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30846)</p> <p>* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30848)</p> <p>* webkitgtk: Multiple memory corruption issue leading to arbitrary code execution (CVE-2021-30849)</p> <p>* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30851)</p> <p>* webkitgtk: Logic issue leading to Content Security Policy bypass (CVE-2021-30887)</p> <p>* webkitgtk: Information leak via Content Security Policy reports (CVE-2021-30888)</p> <p>* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2021-30889)</p> <p>* webkitgtk: Logic issue leading to universal cross-site scripting (CVE-2021-30890)</p> <p>* webkitgtk: Cross-origin data exfiltration via resource timing API (CVE-2021-30897)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30934)</p> <p>* webkitgtk: Process…</p> <p><strong>Affected:</strong> AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042)</p> <p>Security Fix(es):</p> <p>* webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free (CVE-2022-22620)</p> <p>* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30809)</p> <p>* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-30818)</p> <p>* webkitgtk: Logic issue leading to HSTS bypass (CVE-2021-30823)</p> <p>* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30846)</p> <p>* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30848)</p> <p>* webkitgtk: Multiple memory corruption issue leading to arbitrary code execution (CVE-2021-30849)</p> <p>* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30851)</p> <p>* webkitgtk: Logic issue leading to Content Security Policy bypass (CVE-2021-30887)</p> <p>* webkitgtk: Information leak via Content Security Policy reports (CVE-2021-30888)</p> <p>* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2021-30889)</p> <p>* webkitgtk: Logic issue leading to universal cross-site scripting (CVE-2021-30890)</p> <p>* webkitgtk: Cross-origin data exfiltration via resource timing API (CVE-2021-30897)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30934)</p> <p>* webkitgtk: Process…</p> https://cve.radiocsirt.org/vuln/alsa-2022:1777 https://cve.radiocsirt.org/vuln/certfr-2022-avi-243 certfr-2022-avi-243 https://cve.radiocsirt.org/vuln/certfr-2022-avi-243 https://cve.radiocsirt.org/vuln/euvd-2026-240909 EUVD-2026-240909 https://cve.radiocsirt.org/vuln/euvd-2026-240909 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22637 <p>A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.</p> <p>A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22637 https://cve.radiocsirt.org/vuln/ghsa-p38h-v883-px7v <p>A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.</p> <p>A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-p38h-v883-px7v https://cve.radiocsirt.org/vuln/gsd-2022-22637 gsd-2022-22637 https://cve.radiocsirt.org/vuln/gsd-2022-22637 https://cve.radiocsirt.org/vuln/rhsa-2022:1777 <p>webkitgtk: Use-after-free leading to arbitrary code execution webkitgtk: Type confusion issue leading to arbitrary code execution webkitgtk: Logic issue leading to HSTS bypass webkitgtk: Out-of-bounds read leading to memory disclosure webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: Multiple memory corruption issue leading to arbitrary code execution webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: CSS compositing issue leading to revealing of the browsing history webkitgtk: Logic issue leading to Content Security Policy bypass webkitgtk: Information leak via Content Security Policy reports webkitgtk: Buffer overflow leading to arbitrary code execution webkitgtk: Logic issue leading to universal cross-site scripting webkitgtk: Cross-origin data exfiltration via resource timing API webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing ma…</p> <p>webkitgtk: Use-after-free leading to arbitrary code execution webkitgtk: Type confusion issue leading to arbitrary code execution webkitgtk: Logic issue leading to HSTS bypass webkitgtk: Out-of-bounds read leading to memory disclosure webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: Multiple memory corruption issue leading to arbitrary code execution webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: CSS compositing issue leading to revealing of the browsing history webkitgtk: Logic issue leading to Content Security Policy bypass webkitgtk: Information leak via Content Security Policy reports webkitgtk: Buffer overflow leading to arbitrary code execution webkitgtk: Logic issue leading to universal cross-site scripting webkitgtk: Cross-origin data exfiltration via resource timing API webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution webkitgtk: Processing ma…</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1777 https://cve.radiocsirt.org/vuln/rhsa-2025:10364 <p>webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…</p> <p>webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10364 https://cve.radiocsirt.org/vuln/suse-su-2022:1431-1 <p>Security update for webkit2gtk3</p> <p>Security update for webkit2gtk3</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1431-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22637 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 4 more</p> <p>A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 4 more</p> <p>A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22637 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1056 <p>Ein entfernter anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, , um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, einen Spoofing-Angriff durchzuführen und beliebigen Code auszuführen.</p> <p>Ein entfernter anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, , um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, einen Spoofing-Angriff durchzuführen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1056