Skip to content

CVE-2026-28984

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and...

4.3 MediumFix available

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

0.22%Up 0.1 points since Aug 18, 2026

What each source reports

CVE List Score used 4.3

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Record: CVE-2026-28984
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-119, CWE-416
Updated: 2026-11-02

EUVDEUVD-2026-60496 4.3

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Record: EUVD-2026-60496
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mrh2-m3hr-6phv 4.3

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and...

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Record: GHSA-mrh2-m3hr-6phv
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-119
Updated: 2026-11-02

NVD 4.3

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Record: CVE-2026-28984
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-119, CWE-416
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-28984 4.3

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Record: DEBIAN-CVE-2026-28984
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2026:25918 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:25918
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 22 moreShow less

OSVRHSA-2026:25927 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:25927
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:27728 8.8

Red Hat Security Advisory: webkitgtk4 security update

Record: RHSA-2026:27728
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:27785 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:27785
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:27804 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:27804
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:28114 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:28114
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:28146 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:28146
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:28147 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:28147
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:28148 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:28148
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:69098 9.6

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:69098
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:74084 9.6

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:74084
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:69098 9.6

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)
chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)
chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)
chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)
webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)
webkitgtk: Processing maliciously crafted web…

Record: RLSA-2026:69098
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:74084 9.6

Critical: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909)
chromium-browser: Integer overflow in ANGLE (CVE-2026-4464)
chromium-browser: Integer overflow in ANGLE (CVE-2026-4452)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275)
chromium-browser: Integer overflow in ANGLE (CVE-2026-5277)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868)
chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
chromium-browser: Integer overflow in ANGLE (CVE-2026-7340)
chromium-browser: Use after free in ANGLE (CVE-2026-7359)
chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354)
chromium-browser: Use after free in ANGLE (CVE-2026-7901)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
chromium-browser: Integer overflow in ANGLE (CVE-2026-7903)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)
chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)
chromium-browser: chromium-browser: Inappropriate implementation in ANGLE…

Record: RLSA-2026:74084
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-28984 4.3

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Record: UBUNTU-CVE-2026-28984
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVALSA-2026:25918 No score

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)
webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:25918
Updated: 2026-11-02

OSVALSA-2026:25927 No score

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)
webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:25927
Updated: 2026-11-02

OSVALSA-2026:69098 No score

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)
chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)
chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)
chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)
webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635) *…

Record: ALSA-2026:69098
Updated: 2026-11-02

OSVALSA-2026:74084 No score

Critical: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909)
chromium-browser: Integer overflow in ANGLE (CVE-2026-4464)
chromium-browser: Integer overflow in ANGLE (CVE-2026-4452)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275)
chromium-browser: Integer overflow in ANGLE (CVE-2026-5277)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868)
chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
chromium-browser: Integer overflow in ANGLE (CVE-2026-7340)
chromium-browser: Use after free in ANGLE (CVE-2026-7359)
chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354)
chromium-browser: Use after free in ANGLE (CVE-2026-7901)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
chromium-browser: Integer overflow in ANGLE (CVE-2026-7903)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)
chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)
chromium-browser:…

Record: ALSA-2026:74084
Updated: 2026-11-06

OSVopenSUSE-SU-2026:22076-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):

CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.
CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.
CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.
CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.
CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.
CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.
CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.
CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.
CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.
CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.
CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. -…

Record: openSUSE-SU-2026:22076-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24225-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):

CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.
CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.
CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.
CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.
CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.
CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.
CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.
CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.
CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.
CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.
CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. -…

Record: SUSE-SU-2026:24225-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4001-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791).

Changes for webkit2gtk3:

Update to version 2.52.6

Record: SUSE-SU-2026:4001-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4020-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791).

Changes for webkit2gtk3:

Update to version 2.52.6

Record: SUSE-SU-2026:4020-1
Updated: 2026-11-02

OSVUSN-8703-1 No score

webkit2gtk vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Record: USN-8703-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`webkit2gtk3` AlmaLinux:8 From an advisory covering 17 CVEs	before 2.52.4-1.el8_10	2.52.4-1.el8_10
`webkit2gtk3-devel` AlmaLinux:8 From an advisory covering 17 CVEs	before 2.52.4-1.el8_10	2.52.4-1.el8_10
`webkit2gtk3-jsc` AlmaLinux:8 From an advisory covering 17 CVEs	before 2.52.4-1.el8_10	2.52.4-1.el8_10
`webkit2gtk3-jsc-devel` AlmaLinux:8 From an advisory covering 17 CVEs	before 2.52.4-1.el8_10	2.52.4-1.el8_10
`webkit2gtk3` AlmaLinux:9 From an advisory covering 17 CVEs	before 2.52.4-1.el9_8	2.52.4-1.el9_8
`webkit2gtk3-devel` AlmaLinux:9 From an advisory covering 17 CVEs	before 2.52.4-1.el9_8	2.52.4-1.el9_8
`webkit2gtk3-jsc` AlmaLinux:9 From an advisory covering 17 CVEs	before 2.52.4-1.el9_8	2.52.4-1.el9_8
`webkit2gtk3-jsc-devel` AlmaLinux:9 From an advisory covering 17 CVEs	before 2.52.4-1.el9_8	2.52.4-1.el9_8
`webkit2gtk3` AlmaLinux:9 From an advisory covering 307 CVEs	before 2.54.0-1.el9_8	2.54.0-1.el9_8
`webkit2gtk3-devel` AlmaLinux:9 From an advisory covering 307 CVEs	before 2.54.0-1.el9_8	2.54.0-1.el9_8

Show 191 moreShow less

Affected packages
Package	Affected	Fixed
`webkit2gtk3-jsc` AlmaLinux:9 From an advisory covering 307 CVEs	before 2.54.0-1.el9_8	2.54.0-1.el9_8
`webkit2gtk3-jsc-devel` AlmaLinux:9 From an advisory covering 307 CVEs	before 2.54.0-1.el9_8	2.54.0-1.el9_8
`webkit2gtk3` AlmaLinux:8 From an advisory covering 324 CVEs	before 2.54.0-1.el8_10	2.54.0-1.el8_10
`webkit2gtk3-devel` AlmaLinux:8 From an advisory covering 324 CVEs	before 2.54.0-1.el8_10	2.54.0-1.el8_10
`webkit2gtk3-jsc` AlmaLinux:8 From an advisory covering 324 CVEs	before 2.54.0-1.el8_10	2.54.0-1.el8_10
`webkit2gtk3-jsc-devel` AlmaLinux:8 From an advisory covering 324 CVEs	before 2.54.0-1.el8_10	2.54.0-1.el8_10
`webkit2gtk` Debian:12	All versions, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less 2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1	None known
`webkit2gtk` Debian:13	before 2.52.5-1~deb13u1, plus listed versions 2.48.3-12.48.5-12.48.5-1~deb11u12.48.5-1~deb12u12.48.5-1~deb13u1 Show 43 moreShow less 2.48.6-12.49.90-12.50.0-12.50.0-22.50.1-12.50.1-1~deb11u12.50.1-1~deb12u12.50.1-1~deb13u12.50.2-12.50.2-1~deb11u12.50.2-1~deb12u12.50.2-1~deb13u12.50.3-12.50.3-1+hurd.12.50.3-1~deb11u12.50.3-1~deb12u12.50.3-1~deb13u12.50.4-12.50.4-1~deb11u12.50.4-1~deb12u12.50.4-1~deb13u12.50.5-12.50.6-12.50.6-1~deb11u12.50.6-1~deb12u12.50.6-1~deb12u22.50.6-1~deb13u12.51.1-12.51.2-12.51.3-12.51.4-12.51.90-12.51.91-12.51.92-12.51.93-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.3-22.52.3-2~deb13u12.52.4-1	2.52.5-1~deb13u1
`webkit2gtk` Debian:14	before 2.52.4-1, plus listed versions 2.48.3-12.48.5-12.48.5-1~deb11u12.48.5-1~deb12u12.48.5-1~deb13u1 Show 42 moreShow less 2.48.6-12.49.90-12.50.0-12.50.0-22.50.1-12.50.1-1~deb11u12.50.1-1~deb12u12.50.1-1~deb13u12.50.2-12.50.2-1~deb11u12.50.2-1~deb12u12.50.2-1~deb13u12.50.3-12.50.3-1+hurd.12.50.3-1~deb11u12.50.3-1~deb12u12.50.3-1~deb13u12.50.4-12.50.4-1~deb11u12.50.4-1~deb12u12.50.4-1~deb13u12.50.5-12.50.6-12.50.6-1~deb11u12.50.6-1~deb12u12.50.6-1~deb12u22.50.6-1~deb13u12.51.1-12.51.2-12.51.3-12.51.4-12.51.90-12.51.91-12.51.92-12.51.93-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.3-22.52.3-2~deb13u1	2.52.4-1
`wpewebkit` Debian:12	All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less 2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2	None known
`wpewebkit` Debian:13	All versions, plus listed versions 2.48.3-12.48.5-12.48.6-12.48.6-22.50.0-1 Show 17 moreShow less 2.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.4-12.52.5-12.52.6-12.54.0-12.54.0-2	None known
`wpewebkit` Debian:14	before 2.52.4-1, plus listed versions 2.48.3-12.48.5-12.48.6-12.48.6-22.50.0-1 Show 12 moreShow less 2.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-1	2.52.4-1
`webkit2gtk3` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-jsc` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_10	0:2.52.4-1.el8_10
`webkit2gtk3` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-jsc` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_8	0:2.52.4-1.el9_8
`webkitgtk4` Red Hat:rhel_els:7 From an advisory covering 17 CVEs	before 0:2.52.4-1.el7_9	0:2.52.4-1.el7_9
`webkitgtk4-debuginfo` Red Hat:rhel_els:7 From an advisory covering 17 CVEs	before 0:2.52.4-1.el7_9	0:2.52.4-1.el7_9
`webkitgtk4-devel` Red Hat:rhel_els:7 From an advisory covering 17 CVEs	before 0:2.52.4-1.el7_9	0:2.52.4-1.el7_9
`webkitgtk4-jsc` Red Hat:rhel_els:7 From an advisory covering 17 CVEs	before 0:2.52.4-1.el7_9	0:2.52.4-1.el7_9
`webkitgtk4-jsc-devel` Red Hat:rhel_els:7 From an advisory covering 17 CVEs	before 0:2.52.4-1.el7_9	0:2.52.4-1.el7_9
`webkitgtk4-doc` Red Hat:rhel_els:7 From an advisory covering 17 CVEs	before 0:2.52.4-1.el7_9	0:2.52.4-1.el7_9
`webkit2gtk3` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_4	0:2.52.4-1.el8_4
`webkit2gtk3` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-devel` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-debugsource` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-devel` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc-devel` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_8	0:2.52.4-1.el8_8
`webkit2gtk3` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el8_6	0:2.52.4-1.el8_6
`webkit2gtk3` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-devel` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-jsc` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_4	0:2.52.4-1.el9_4
`webkit2gtk3` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-debugsource` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-devel` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-jsc` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_6	0:2.52.4-1.el9_6
`webkit2gtk3` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-devel` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-jsc` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 17 CVEs	before 0:2.52.4-1.el9_2	0:2.52.4-1.el9_2
`webkit2gtk3` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-jsc` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 228 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-jsc` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3` Rocky Linux:9 From an advisory covering 116 CVEs	before 0:2.54.0-1.el9_8	0:2.54.0-1.el9_8
`webkit2gtk3` Rocky Linux:8 From an advisory covering 323 CVEs	before 0:2.54.0-1.el8_10	0:2.54.0-1.el8_10
`webkit2gtk3` SUSE:Linux Enterprise Server 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1
`webkit2gtk4` SUSE:Linux Enterprise Server 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs	before 2.52.6-150400.4.149.2	2.52.6-150400.4.149.2
`webkit2gtk3-soup2` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 9 CVEs	before 2.52.6-150600.12.74.1	2.52.6-150600.12.74.1
`webkit2gtk4` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 9 CVEs	before 2.52.6-150600.12.74.1	2.52.6-150600.12.74.1
`webkit2gtk3` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 9 CVEs	before 2.52.6-150600.12.74.1	2.52.6-150600.12.74.1
`webkit2gtk4` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 9 CVEs	before 2.52.6-150600.12.74.1	2.52.6-150600.12.74.1
`qtwebkit-opensource-src` Ubuntu:16.04:LTS	All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1	None known
`webkit2gtk` Ubuntu:16.04:LTS	All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less 2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1	None known
`qtwebkit-source` Ubuntu:16.04:LTS	All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11	None known
`webkitgtk` Ubuntu:16.04:LTS	All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1	None known
`webkit2gtk` Ubuntu:18.04:LTS	All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less 2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1	None known
`qtwebkit-opensource-src` Ubuntu:18.04:LTS	All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1	None known
`qtwebkit-source` Ubuntu:18.04:LTS	All versions, plus listed versions 2.3.2-0ubuntu13	None known
`webkitgtk` Ubuntu:18.04:LTS	All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3	None known
`webkit2gtk` Ubuntu:20.04:LTS	All versions, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 26 moreShow less 2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.12.38.4-0ubuntu0.20.04.22.38.5-0ubuntu0.20.04.12.38.6-0ubuntu0.20.04.1	None known
`qtwebkit-opensource-src` Ubuntu:20.04:LTS	All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1	None known
`wpewebkit` Ubuntu:20.04:LTS	All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1	None known
`qtwebkit-opensource-src` Ubuntu:22.04:LTS	All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1	None known
`webkit2gtk` Ubuntu:22.04:LTS	All versions, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 37 moreShow less 2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.12.36.4-0ubuntu0.22.04.12.36.6-0ubuntu0.22.04.12.36.7-0ubuntu0.22.04.12.36.8-0ubuntu0.22.04.12.38.2-0ubuntu0.22.04.22.38.3-0ubuntu0.22.04.12.38.4-0ubuntu0.22.04.12.38.5-0ubuntu0.22.04.12.38.6-0ubuntu0.22.04.12.40.4-0ubuntu0.22.04.12.40.5-0ubuntu0.22.04.12.42.1-0ubuntu0.22.04.12.42.2-0ubuntu0.22.04.12.42.3-0ubuntu0.22.04.12.42.4-0ubuntu0.22.04.12.42.5-0ubuntu0.22.04.22.44.0-0ubuntu0.22.04.12.44.2-0ubuntu0.22.04.12.44.3-0ubuntu0.22.04.12.46.1-0ubuntu0.22.04.32.46.3-0ubuntu0.22.04.12.46.4-0ubuntu0.22.04.12.46.5-0ubuntu0.22.04.12.46.6-0ubuntu0.22.04.12.48.0-0ubuntu0.22.04.12.48.1-0ubuntu0.22.04.12.48.3-0ubuntu0.22.04.12.48.5-0ubuntu0.22.04.12.48.7-0ubuntu0.22.04.22.50.1-0ubuntu0.22.04.12.50.2-0ubuntu0.22.04.22.50.3-0ubuntu0.22.04.12.50.4-0ubuntu0.22.04.1	None known
`wpewebkit` Ubuntu:22.04:LTS	All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less 2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3	None known
`qtwebkit-opensource-src` Ubuntu:24.04:LTS	All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36	None known
`webkit2gtk` Ubuntu:24.04:LTS	before 2.52.6-0ubuntu0.24.04.1, plus listed versions 2.42.1-22.42.2-12.42.3-12.42.4-12.43.3-1 Show 20 moreShow less 2.43.3-1build22.44.0-22.44.2-0ubuntu0.24.04.12.44.2-0ubuntu0.24.04.22.44.3-0ubuntu0.24.04.12.46.1-0ubuntu0.24.04.12.46.3-0ubuntu0.24.04.12.46.4-0ubuntu0.24.04.12.46.5-0ubuntu0.24.04.12.46.6-0ubuntu0.24.04.12.48.0-0ubuntu0.24.04.12.48.1-0ubuntu0.24.04.12.48.3-0ubuntu0.24.04.12.48.5-0ubuntu0.24.04.12.48.7-0ubuntu0.24.04.22.50.1-0ubuntu0.24.04.12.50.2-0ubuntu0.24.04.22.50.3-0ubuntu0.24.04.12.50.4-0ubuntu0.24.04.12.52.3-0ubuntu0.24.04.1	2.52.6-0ubuntu0.24.04.1
`webkit2gtk` Ubuntu:26.04:LTS	before 2.52.6-0ubuntu0.26.04.1, plus listed versions 2.48.6-1ubuntu22.50.0-2ubuntu12.50.1-1ubuntu12.50.2-1ubuntu12.50.3-1ubuntu1 Show 6 moreShow less 2.50.4-1ubuntu12.51.91-12.51.92-12.52.0-12.52.3-0ubuntu0.26.04.22.52.3-0ubuntu0.26.04.3	2.52.6-0ubuntu0.26.04.1
`webkit2gtk` Ubuntu:24.04:LTS From an advisory covering 47 CVEs	before 2.52.6-0ubuntu0.24.04.1, plus listed versions 2.42.1-22.42.2-12.42.3-12.42.4-12.43.3-1 Show 20 moreShow less 2.43.3-1build22.44.0-22.44.2-0ubuntu0.24.04.12.44.2-0ubuntu0.24.04.22.44.3-0ubuntu0.24.04.12.46.1-0ubuntu0.24.04.12.46.3-0ubuntu0.24.04.12.46.4-0ubuntu0.24.04.12.46.5-0ubuntu0.24.04.12.46.6-0ubuntu0.24.04.12.48.0-0ubuntu0.24.04.12.48.1-0ubuntu0.24.04.12.48.3-0ubuntu0.24.04.12.48.5-0ubuntu0.24.04.12.48.7-0ubuntu0.24.04.22.50.1-0ubuntu0.24.04.12.50.2-0ubuntu0.24.04.22.50.3-0ubuntu0.24.04.12.50.4-0ubuntu0.24.04.12.52.3-0ubuntu0.24.04.1	2.52.6-0ubuntu0.24.04.1
`webkit2gtk` Ubuntu:26.04:LTS From an advisory covering 47 CVEs	before 2.52.6-0ubuntu0.26.04.1, plus listed versions 2.48.6-1ubuntu22.50.0-2ubuntu12.50.1-1ubuntu12.50.2-1ubuntu12.50.3-1ubuntu1 Show 6 moreShow less 2.50.4-1ubuntu12.51.91-12.51.92-12.52.0-12.52.3-0ubuntu0.26.04.22.52.3-0ubuntu0.26.04.3	2.52.6-0ubuntu0.26.04.1
`webkit2gtk3` openSUSE:Leap 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1
`webkit2gtk3-soup2` openSUSE:Leap 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1
`webkit2gtk4` openSUSE:Leap 16.0 From an advisory covering 243 CVEs	before 2.54.1-160000.1.1	2.54.1-160000.1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-28984 is a medium vulnerability (CVSS 4.3) in Apple Ipados, published June 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in webkit2gtk 2.52.5-1~deb13u1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 123 versions, 2,273 references and the rest of 6 source descriptions. The JSON record has them.