rpm package

almalinux/webkit2gtk3-devel

pkg:rpm/almalinux/webkit2gtk3-devel

Vulnerabilities (565)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-8519	Hig	8.8	< 2.54.0-1.el8_10	2.54.0-1.el8_10	May 14, 2026	Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-8510	Hig	7.5	< 2.54.0-1.el8_10	2.54.0-1.el8_10	May 14, 2026	Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-43660	Hig	7.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Poli
CVE-2026-43658	Hig	7.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safa
CVE-2026-28958	Med	5.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28955	Hig	8.8	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28953	Hig	7.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28947	Hig	8.8	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an
CVE-2026-28946	Med	6.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28942	Med	6.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28907	Hig	8.1	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Po
CVE-2026-28905	Hig	7.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28904	Hig	7.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28903	Med	6.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28902	Med	6.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28901	Med	4.3	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28883	Hig	7.5	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28847	Hig	8.8	< 2.52.4-1.el8_10	2.52.4-1.el8_10	May 11, 2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-7949	Low	3.1	< 2.54.0-1.el8_10	2.54.0-1.el8_10	May 6, 2026	Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-7943	Med	4.2	< 2.54.0-1.el8_10	2.54.0-1.el8_10	May 6, 2026	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-8519HigMay 14, 2026
affected < 2.54.0-1.el8_10fixed 2.54.0-1.el8_10
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-8510HigMay 14, 2026
affected < 2.54.0-1.el8_10fixed 2.54.0-1.el8_10
Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-43660HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Poli
CVE-2026-43658HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safa
CVE-2026-28958MedMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28955HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28953HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28947HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an
CVE-2026-28946MedMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28942MedMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28907HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Po
CVE-2026-28905HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28904HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28903MedMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-28902MedMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28901MedMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28883HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28847HigMay 11, 2026
affected < 2.52.4-1.el8_10fixed 2.52.4-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected proces
CVE-2026-7949LowMay 6, 2026
affected < 2.54.0-1.el8_10fixed 2.54.0-1.el8_10
Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-7943MedMay 6, 2026
affected < 2.54.0-1.el8_10fixed 2.54.0-1.el8_10
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium)

Page 15 of 29