rpm package

almalinux/webkit2gtk3

pkg:rpm/almalinux/webkit2gtk3

Vulnerabilities (240)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2025-43272	Med	6.5		< 2.50.0-1.el8_10	2.50.0-1.el8_10	Sep 15, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43265	Med	4.0		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-43240	Med	6.2		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.
CVE-2025-43227	Hig	7.5		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2025-43216	Med	6.5		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safar
CVE-2025-43214	Med	6.5		< 2.52.3-1.el8_10	2.52.3-1.el8_10	Jul 30, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43213	Med	6.5		< 2.52.3-1.el8_10	2.52.3-1.el8_10	Jul 30, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43212	Med	6.5		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43211	Med	6.2		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing web content may lead to a denial-of-service.
CVE-2025-31278	Hig	8.8		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31273	Hig	8.8		< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 30, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-6558		—	KEV	< 2.48.5-1.el8_10	2.48.5-1.el8_10	Jul 15, 2025	Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2025-31257	Med	4.7		< 2.48.2-1.el9_6	2.48.2-1.el9_6	May 12, 2025	This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-31205	Med	6.5		< 2.48.2-1.el9_6	2.48.2-1.el9_6	May 12, 2025	The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin.
CVE-2025-30427	Med	4.3		< 2.48.1-1.el9_5	2.48.1-1.el9_5	Mar 31, 2025	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safar
CVE-2025-24216	Med	4.3		< 2.48.1-1.el9_5	2.48.1-1.el9_5	Mar 31, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-24209	Hig	7.0		< 2.48.1-1.el9_5	2.48.1-1.el9_5	Mar 31, 2025	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-24208		—		< 2.48.1-1.el9_5	2.48.1-1.el9_5	Mar 31, 2025	A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.
CVE-2024-54551	Hig	7.5		< 2.48.1-1.el9_5	2.48.1-1.el9_5	Mar 21, 2025	The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service.
CVE-2025-24201	Cri	10.0	KEV	< 2.46.6-2.el8_10	2.46.6-2.el8_10	Mar 11, 2025	An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2,

CVE-2025-43272MedSep 15, 2025
affected < 2.50.0-1.el8_10fixed 2.50.0-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43265MedJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-43240MedJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.
CVE-2025-43227HigJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2025-43216MedJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safar
CVE-2025-43214MedJul 30, 2025
affected < 2.52.3-1.el8_10fixed 2.52.3-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43213MedJul 30, 2025
affected < 2.52.3-1.el8_10fixed 2.52.3-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43212MedJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43211MedJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing web content may lead to a denial-of-service.
CVE-2025-31278HigJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31273HigJul 30, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-6558KEVJul 15, 2025
affected < 2.48.5-1.el8_10fixed 2.48.5-1.el8_10
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2025-31257MedMay 12, 2025
affected < 2.48.2-1.el9_6fixed 2.48.2-1.el9_6
This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-31205MedMay 12, 2025
affected < 2.48.2-1.el9_6fixed 2.48.2-1.el9_6
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin.
CVE-2025-30427MedMar 31, 2025
affected < 2.48.1-1.el9_5fixed 2.48.1-1.el9_5
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safar
CVE-2025-24216MedMar 31, 2025
affected < 2.48.1-1.el9_5fixed 2.48.1-1.el9_5
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-24209HigMar 31, 2025
affected < 2.48.1-1.el9_5fixed 2.48.1-1.el9_5
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-24208Mar 31, 2025
affected < 2.48.1-1.el9_5fixed 2.48.1-1.el9_5
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.
CVE-2024-54551HigMar 21, 2025
affected < 2.48.1-1.el9_5fixed 2.48.1-1.el9_5
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service.
CVE-2025-24201CriKEVMar 11, 2025
affected < 2.46.6-2.el8_10fixed 2.46.6-2.el8_10
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2,

Page 4 of 12