{"id":"CVE-2025-43228","aliases":["CLSA-2025-1756751564","DEBIAN-CVE-2025-43228","DLA-4276-1","DSA-5978-1","EUVD-2025-23084","GHSA-wjrj-j5jq-gmmx","MGASA-2025-0313","SUSE-SU-2025:02765-1","SUSE-SU-2025:02766-1","SUSE-SU-2025:02777-1","SUSE-SU-2025:02973-1","UBUNTU-CVE-2025-43228","USN-7702-1"],"status":"published","title":"The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6....","description":"The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00926,"percentile":0.60893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-451"],"published":"2025-07-29T23:35:36Z","modified":"2026-10-28T20:15:40Z","fixes":[{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.48.5-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.48.5-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.48.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.48.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","fixed_in":["2.48.5-0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","fixed_in":["2.48.5-0ubuntu0.24.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1"}]}],"versions":["2.48.3-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1"}]}],"versions":["2.48.3-1"]},{"source":"osv","ecosystem":"Debian:11","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb11u1"}]}],"versions":["2.32.3-1","2.32.4-1","2.32.4-1~deb10u1","2.32.4-1~deb11u1","2.33.1-1","2.33.2-1","2.33.3-1","2.33.90-1","2.33.91-1","2.34.0-1","2.34.0-1~bpo11+1","2.34.1-1","2.34.1-1~deb10u1","2.34.1-1~deb11u1","2.34.2-1","2.34.2-1~bpo11+1","2.34.3-1","2.34.3-1~deb10u1","2.34.3-1~deb11u1","2.34.4-1","2.34.4-1~deb10u1","2.34.4-1~deb11u1","2.34.5-1","2.34.6-1","2.34.6-1~deb10u1","2.34.6-1~deb11u1","2.35.1-1","2.35.2-1","2.35.3-1","2.35.90-1","2.36.0-1","2.36.0-2","2.36.0-3","2.36.0-3~deb10u1","2.36.0-3~deb11u1","2.36.1-1","2.36.2-1","2.36.3-1","2.36.3-1~deb10u1","2.36.3-1~deb11u1","2.36.4-1","2.36.4-1~deb10u1","2.36.4-1~deb11u1","2.36.6-1","2.36.6-1~deb10u1","2.36.6-1~deb11u1","2.36.7-1","2.36.7-1~deb10u1","2.36.7-1~deb11u1","2.37.1-1","2.37.1-2","2.37.90-1","2.37.91-1","2.38.0-1","2.38.0-1~deb10u1","2.38.0-1~deb11u1","2.38.0-2","2.38.0-3","2.38.1-1","2.38.2-1","2.38.2-1~deb10u1","2.38.2-1~deb11u1","2.38.3-1","2.38.3-1~deb10u1","2.38.3-1~deb11u1","2.38.4-1","2.38.4-2","2.38.4-2~deb10u1","2.38.4-2~deb11u1","2.38.5-1","2.38.5-1+m68k","2.38.5-1~deb10u1","2.38.5-1~deb11u1","2.39.1-1","2.39.2-1","2.39.3-1","2.39.4-1","2.39.5-1","2.39.7-1","2.39.90-1","2.39.91-1","2.40.0-1","2.40.0-2","2.40.0-3","2.40.1-1","2.40.1-1~deb11u1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1~deb11u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Mageia:9","package":"webkit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.1-1.2.mga9"}]}],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-4.41.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-4.41.1"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1"],"bundled":10}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"safari"}],"references":[{"url":"https://support.apple.com/en-us/124147","tags":["Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/124152","tags":["Release Notes","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Aug/0","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/30","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/08/02/1","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43228"},{"url":"https://github.com/advisories/GHSA-wjrj-j5jq-gmmx"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1756751564.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-43228","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0313.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34747","tags":["report"]},{"url":"https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/security/WSA-2025-0007.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/security/WSA-2025-0006.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/07/31/webkitgtk2.49.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/security/WSA-2025-0005.html","tags":["web","report"]},{"url":"https://webkitgtk.org/2025/05/28/webkitgtk2.48.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/05/14/webkitgtk2.48.2-released.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502765-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247562","tags":["report"]},{"url":"https://bugzilla.suse.com/1247563","tags":["report"]},{"url":"https://bugzilla.suse.com/1247564","tags":["report"]},{"url":"https://bugzilla.suse.com/1247595","tags":["report"]},{"url":"https://bugzilla.suse.com/1247596","tags":["report"]},{"url":"https://bugzilla.suse.com/1247597","tags":["report"]},{"url":"https://bugzilla.suse.com/1247598","tags":["report"]},{"url":"https://bugzilla.suse.com/1247599","tags":["report"]},{"url":"https://bugzilla.suse.com/1247600","tags":["report"]},{"url":"https://bugzilla.suse.com/1247742","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-54467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6558","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502766-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502777-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502973-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239547","tags":["report"]},{"url":"https://bugzilla.suse.com/1239863","tags":["report"]},{"url":"https://bugzilla.suse.com/1239864","tags":["report"]},{"url":"https://bugzilla.suse.com/1247565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43228","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7702-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-6558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43265","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-43228","description":"The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-29T23:35:36.137Z","modified":"2026-04-02T18:16:48.845Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-451"],"updated_at":"2026-11-02T14:32:27.28543Z"}],"euvd":[{"id":"EUVD-2025-23084","description":"The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-29T23:35:36Z","modified":"2026-04-02T18:16:48Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:19.933262Z"}],"ghsa":[{"id":"GHSA-wjrj-j5jq-gmmx","title":"The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6....","description":"The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-30T00:32:22Z","modified":"2025-11-05T00:31:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-451"],"updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2025-43228","description":"The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-30T00:15:34.917Z","modified":"2026-06-17T09:23:32.553Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-451"],"updated_at":"2026-11-02T14:11:21.71471Z"}],"osv":[{"id":"CVE-2025-43228","description":"The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6, Safari 18. 6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-30T00:15:34.917Z","modified":"2026-04-16T04:33:56.907030245Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:49.394967Z"},{"id":"DEBIAN-CVE-2025-43228","description":"The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-30T00:15:34.917Z","modified":"2026-09-01T20:05:52.589730762Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:46.998514Z"},{"id":"UBUNTU-CVE-2025-43228","description":"The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.","status":"published","published":"2025-07-30T00:15:00Z","modified":"2026-10-28T20:15:40.907363824Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:46.53147Z"},{"id":"CLSA-2025-1756751564","title":"webkit2gtk3: Fix of 18 CVEs","description":"- Update to 2.48.5. The following CVEs were fixed:\n- CVE-2025-6558: fix processing maliciously crafted web content which may\n  lead to an unexpected Safari crash\n- CVE-2025-31273: fix processing maliciously crafted web content which may\n  lead to memory corruption\n- CVE-2025-31278: fix processing maliciously crafted web content which may\n  lead to memory corruption\n- CVE-2025-43212: fix processing maliciously crafted web content which may\n  lead to an unexpected Safari crash\n- CVE-2025-43216: fix processing maliciously crafted web content which may\n  lead to an unexpected Safari crash\n- CVE-2025-43228: fix issue with visiting a malicious website which may lead\n  to address bar spoofing\n- CVE-2025-24189: fix processing maliciously crafted web content which may\n  lead to memory corruption\n- CVE-2025-31205: fix issue with a malicious website which may exfiltrate\n  data cross-origin\n- CVE-2025-24208: fix loading a malicious iframe which may lead to a cross-site\n  scripting attack\n- CVE-2024-54551: fix processing web content which may lead to a denial-of-service\n- CVE-2024-44192: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-54467: fix issue with a malicious website which may exfiltrate\n  data cross-origin\n- CVE-2025-24162: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-54502: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-44244: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-44185: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-44187: fix issue wit a malicious website may exfiltrate data\n  cross-origin\n- CVE-2024-40866: fix issue with visiting a malicious website which may lead\n  to address bar spoofing","status":"published","published":"2025-09-15T07:50:41Z","modified":"2026-10-21T10:46:16.245508231Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"DLA-4276-1","title":"webkit2gtk - security update","status":"published","published":"2025-08-20T00:00:00Z","modified":"2026-03-09T02:10:02.631613Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5978-1","title":"webkit2gtk - security update","status":"published","published":"2025-08-18T00:00:00Z","modified":"2026-03-09T02:10:00.680743Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0313","title":"Updated webkit2 packages fix security vulnerabilities","description":"We are updating webkit2 to version 2.50.1 that has many security fixes\nsince our current version.\nPlease see the links for additional information\n","status":"published","published":"2025-11-25T19:41:03Z","modified":"2026-04-16T04:43:57.583521705Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"SUSE-SU-2025:02765-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdated to version 2.48.5: \n  - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)\n  - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)\n  - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)\n  - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)\n  - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596)\n  - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597)\n  - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598)\n  - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599)\n  - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600)\n  - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742)\n\nOther fixes:\n- Improve emoji font selection with USE_SKIA=ON.\n- Improve playback of multimedia streams from blob URLs.\n- Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n  USE_SYSPROF_CAPTURE=ON.\n- Fix crash when using a WebKitWebView widget in an offscreen\n  window.\n- Fix several crashes and rendering issues.\n- Fix a crash introduced by the new threaded rendering\n  implementation using Skia API.\n- Improve rendering performance by recording layers once and\n  replaying every dirty region in different worker threads.\n- Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n- Fix a reference cycle in webkitmediastreamsrc preventing its\n  disposal.\n- Increase mem_per_process again to avoid running out of memory.\n\n  ","status":"published","published":"2025-08-12T12:59:26Z","modified":"2026-03-23T04:46:47.191619Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02766-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdated to version 2.48.5:                                                                                                                                                                                                                                                          \n  - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)                                                                                                                                           \n  - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)                                                                                                                                             \n  - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)                                                                                                                                                               \n  - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)                                                                                                                                    \n  - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596)                                                                                                                                    \n  - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597)                                                                                                                                   \n  - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598)                                                                                                                                                        \n  - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599)                                                                                                                                                                    \n  - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600)                                                                                                                                   \n  - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742)\n\nOther fixes:\n- Improve emoji font selection with USE_SKIA=ON.\n- Improve playback of multimedia streams from blob URLs.\n- Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n  USE_SYSPROF_CAPTURE=ON.\n- Fix crash when using a WebKitWebView widget in an offscreen\n  window.\n- Fix several crashes and rendering issues.\n- Fix a crash introduced by the new threaded rendering\n  implementation using Skia API.\n- Improve rendering performance by recording layers once and\n  replaying every dirty region in different worker threads.\n- Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n- Fix a reference cycle in webkitmediastreamsrc preventing its\n  disposal.\n- Increase mem_per_process again to avoid running out of memory.\n","status":"published","published":"2025-08-12T13:00:40Z","modified":"2026-03-23T04:49:45.959969Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02777-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdated to version 2.48.5: \n  - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)\n  - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)\n  - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)\n  - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)\n  - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596)\n  - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597)\n  - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598)\n  - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599)\n  - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600)\n  - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742)\n\nOther fixes:\n- Improve emoji font selection with USE_SKIA=ON.\n- Improve playback of multimedia streams from blob URLs.\n- Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n  USE_SYSPROF_CAPTURE=ON.\n- Fix crash when using a WebKitWebView widget in an offscreen\n  window.\n- Fix several crashes and rendering issues.\n- Fix a crash introduced by the new threaded rendering\n  implementation using Skia API.\n- Improve rendering performance by recording layers once and\n  replaying every dirty region in different worker threads.\n- Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n- Fix a reference cycle in webkitmediastreamsrc preventing its\n  disposal.\n- Increase mem_per_process again to avoid running out of memory.\n","status":"published","published":"2025-08-13T06:44:04Z","modified":"2026-02-04T04:30:38.235533Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02973-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- Update to version 2.48.5: \n  + CVE-2025-31273: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247564)\n  + CVE-2025-43265: Fixed processing maliciously crafted web content disclosing internal states of the app (bsc#1247600)\n  + CVE-2025-43216: Fixed processing maliciously crafted web content leading to an unexpected Safari crash (bsc#1247596)\n  + CVE-2025-31278: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247563)\n  + CVE-2025-6558: Fixed processing maliciously crafted web content leading to an unexpected Safari crash. (bsc#1247742)\n  + CVE-2025-43227: Fixed Processing maliciously crafted web content disclosing sensitive user information (bsc#1247597)\n  + CVE-2025-43240: Fixed download’s origin incorrectly associated (bsc#1247599)\n  + CVE-2025-43228: Fixed visiting a malicious website leading to address bar spoofing (bsc#1247598)\n  + CVE-2025-43212: Fixed processing maliciously crafted web content leading to an unexpected Safari crash (bsc#1247595)\n  + CVE-2025-43211: Fixed processing web content leading to a denial-of-service (bsc#1247562) \n  + Fix several crashes.\n  + Changes in version 2.48.4:\n  + Improve emoji font selection with USE_SKIA=ON.\n  + Improve playback of multimedia streams from blob URLs.\n  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n    USE_SYSPROF_CAPTURE=ON.\n  + Fix the build on LoongArch with USE_SKIA=ON.\n  + Fix crash when using a WebKitWebView widget in an offscreen\n    window.\n  + Fix several crashes and rendering issues.\n  + Changes in version 2.48.3:\n  + Fix a crash introduced by the new threaded rendering\n    implementation using Skia API.\n  + Improve rendering performance by recording layers once and\n    replaying every dirty region in different worker threads.\n  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n  + Fix a reference cycle in webkitmediastreamsrc preventing its\n    disposal.\n\n- CVE-2024-44192:Fixed processing maliciously crafted web content leading to an unexpected process crash (bsc#1239863)\n- CVE-2024-54467: Fixed data cross-origin exfiltration due to a cookie management issue (bsc#1239864)\n- CVE-2025-24201: Fixed out-of-bounds write vulnerability (bsc#1239547)\n- CVE-2025-24189: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247565)\n  ","status":"published","published":"2025-08-25T08:49:16Z","modified":"2026-03-23T04:45:44.236708Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"USN-7702-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","status":"published","published":"2025-08-19T15:20:35Z","modified":"2026-04-27T18:17:06.687733441Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}