{"id":"CVE-2025-6558","aliases":["ALPINE-CVE-2025-6558","ALSA-2025:13780","ALSA-2025:13782","AZL-65586","CLSA-2025-1756751564","DEBIAN-CVE-2025-6558","DLA-4276-1","DSA-5963-1","DSA-5978-1","EUVD-2025-21546","GHSA-5w32-633g-38jh","MGASA-2025-0313","RHSA-2025:13780","RHSA-2025:13782","RHSA-2025:14421","RHSA-2025:14422","RHSA-2025:14423","RHSA-2025:14432","RHSA-2025:14433","RHSA-2025:14434","RHSA-2025:14486","RHSA-2025:15729","RLSA-2025:13780","RLSA-2025:13782","SUSE-SU-2025:02765-1","SUSE-SU-2025:02766-1","SUSE-SU-2025:02777-1","SUSE-SU-2025:02973-1","SUSE-SU-2026:24225-1","SUSE-SU-2026:4676-1","SUSE-SU-2026:4858-1","UBUNTU-CVE-2025-6558","USN-7702-1","openSUSE-SU-2025:15350-1","openSUSE-SU-2026:22076-1"],"status":"published","title":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204...","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.10927,"percentile":0.95936,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-20"],"published":"2025-07-15T18:12:36Z","modified":"2026-11-03T06:32:34Z","kev":{"date_added":"2025-07-22","due_date":"2025-08-12","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-07-22"},{"source":"kev","since":"2025-07-22"}],"exploits":[{"source":"pocgithub","id":"gmh5225/CVE-2025-6558-exp","title":"gmh5225/CVE-2025-6558-exp","date":"2025-07-22","url":"https://github.com/gmh5225/CVE-2025-6558-exp"},{"source":"pocgithub","id":"DevBuiHieu/CVE-2025-6558-Proof-Of-Concept","title":"DevBuiHieu/CVE-2025-6558-Proof-Of-Concept","date":"2025-07-24","url":"https://github.com/DevBuiHieu/CVE-2025-6558-Proof-Of-Concept"}],"fixes":[{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.8.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.9.1-r3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"qt5-qtbase","fixed_in":["5.12.11-18"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"chromium","fixed_in":["138.0.7204.157-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chromium","fixed_in":["138.0.7204.157-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chromium","fixed_in":["138.0.7204.157-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.48.5-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.48.5-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.48.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.48.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","fixed_in":["2.48.5-0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","fixed_in":["2.48.5-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"webkit2gtk","fixed_in":["2.48.6-1ubuntu2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.1-r3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.11-18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1.el9.tuxcare.els1"}]}],"bundled":18},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"138.0.7204.157-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1","127.0.6533.119-1","127.0.6533.119-1~deb13u1","127.0.6533.88-1","127.0.6533.88-1~deb12u1","127.0.6533.99-1","127.0.6533.99-1~deb12u1","128.0.6613.113-1","128.0.6613.113-1~deb12u1","128.0.6613.113-1~deb13u1","128.0.6613.119-1","128.0.6613.119-1~deb12u1","128.0.6613.137-1","128.0.6613.137-1~deb12u1","128.0.6613.84-1","128.0.6613.84-1~deb12u1","129.0.6668.100-1","129.0.6668.100-1~deb12u1","129.0.6668.100-2","129.0.6668.58-1","129.0.6668.58-1~deb12u1","129.0.6668.70-1","129.0.6668.70-1~deb12u1","129.0.6668.89-1","129.0.6668.89-1~deb12u1","130.0.6723.116-1","130.0.6723.116-1~deb12u1","130.0.6723.58-1","130.0.6723.58-1~deb12u1","130.0.6723.69-1","130.0.6723.69-1~deb12u1","130.0.6723.91-1","130.0.6723.91-1~deb12u1","130.0.6723.91-2","131.0.6778.108-1","131.0.6778.108-1~deb12u1","131.0.6778.139-1","131.0.6778.139-1~deb12u1","131.0.6778.204-1","131.0.6778.204-1~deb12u1","131.0.6778.264-1","131.0.6778.264-1~deb12u1","131.0.6778.85-1","131.0.6778.85-1~deb12u1","132.0.6834.110-1","132.0.6834.110-1~deb12u1","132.0.6834.159-1","132.0.6834.159-1~deb12u1","132.0.6834.83-1","132.0.6834.83-1~deb12u1","133.0.6943.126-1","133.0.6943.126-1~deb12u1","133.0.6943.141-2","133.0.6943.53-1","133.0.6943.53-1~deb12u1","133.0.6943.98-1","133.0.6943.98-1~deb12u1","134.0.6998.117-1","134.0.6998.117-1~deb12u1","134.0.6998.35-1","134.0.6998.35-1~deb12u1","134.0.6998.35-2","134.0.6998.35-3","134.0.6998.88-1","134.0.6998.88-1~deb12u1","135.0.7049.114-1","135.0.7049.52-1","135.0.7049.52-1~deb12u1","135.0.7049.84-1","135.0.7049.84-1~deb12u1","135.0.7049.95-1","135.0.7049.95-1~deb12u1","136.0.7103.113-1","136.0.7103.113-1~deb12u1","136.0.7103.59-2","136.0.7103.59-2~deb12u2","136.0.7103.92-1","136.0.7103.92-1~deb12u1","136.0.7103.92-2","137.0.7151.103-1","137.0.7151.103-1~deb12u1","137.0.7151.119-1","137.0.7151.119-1~deb12u1","137.0.7151.55-1","137.0.7151.55-2","137.0.7151.55-3","137.0.7151.55-3~deb12u1","137.0.7151.68-1","137.0.7151.68-1~deb12u1","138.0.7204.49-1","138.0.7204.49-1~deb12u1","138.0.7204.92-1","138.0.7204.92-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"138.0.7204.157-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"138.0.7204.157-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1"}]}],"versions":["2.48.3-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2"]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1"}]}],"versions":["2.48.3-1"]},{"source":"osv","ecosystem":"Debian:11","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb11u1"}]}],"versions":["2.32.3-1","2.32.4-1","2.32.4-1~deb10u1","2.32.4-1~deb11u1","2.33.1-1","2.33.2-1","2.33.3-1","2.33.90-1","2.33.91-1","2.34.0-1","2.34.0-1~bpo11+1","2.34.1-1","2.34.1-1~deb10u1","2.34.1-1~deb11u1","2.34.2-1","2.34.2-1~bpo11+1","2.34.3-1","2.34.3-1~deb10u1","2.34.3-1~deb11u1","2.34.4-1","2.34.4-1~deb10u1","2.34.4-1~deb11u1","2.34.5-1","2.34.6-1","2.34.6-1~deb10u1","2.34.6-1~deb11u1","2.35.1-1","2.35.2-1","2.35.3-1","2.35.90-1","2.36.0-1","2.36.0-2","2.36.0-3","2.36.0-3~deb10u1","2.36.0-3~deb11u1","2.36.1-1","2.36.2-1","2.36.3-1","2.36.3-1~deb10u1","2.36.3-1~deb11u1","2.36.4-1","2.36.4-1~deb10u1","2.36.4-1~deb11u1","2.36.6-1","2.36.6-1~deb10u1","2.36.6-1~deb11u1","2.36.7-1","2.36.7-1~deb10u1","2.36.7-1~deb11u1","2.37.1-1","2.37.1-2","2.37.90-1","2.37.91-1","2.38.0-1","2.38.0-1~deb10u1","2.38.0-1~deb11u1","2.38.0-2","2.38.0-3","2.38.1-1","2.38.2-1","2.38.2-1~deb10u1","2.38.2-1~deb11u1","2.38.3-1","2.38.3-1~deb10u1","2.38.3-1~deb11u1","2.38.4-1","2.38.4-2","2.38.4-2~deb10u1","2.38.4-2~deb11u1","2.38.5-1","2.38.5-1+m68k","2.38.5-1~deb10u1","2.38.5-1~deb11u1","2.39.1-1","2.39.2-1","2.39.3-1","2.39.4-1","2.39.5-1","2.39.7-1","2.39.90-1","2.39.91-1","2.40.0-1","2.40.0-2","2.40.0-3","2.40.1-1","2.40.1-1~deb11u1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"138.0.7204.157-1~deb12u1"}]}],"versions":["113.0.5672.126-1","114.0.5735.106-1","114.0.5735.106-1~deb11u1","114.0.5735.106-1~deb12u1","114.0.5735.133-1","114.0.5735.133-1~deb11u1","114.0.5735.133-1~deb12u1","114.0.5735.198-1","114.0.5735.198-1~deb11u1","114.0.5735.198-1~deb12u1","114.0.5735.90-1","114.0.5735.90-2","114.0.5735.90-2~deb11u1","114.0.5735.90-2~deb12u1","115.0.5790.102-1","115.0.5790.102-2","115.0.5790.170-1","115.0.5790.170-1~deb11u1","115.0.5790.170-1~deb12u1","115.0.5790.98-1","115.0.5790.98-1~deb11u1","115.0.5790.98-1~deb12u1","115.0.5790.98-2","116.0.5845.110-1","116.0.5845.110-1~deb11u1","116.0.5845.110-1~deb12u1","116.0.5845.110-2","116.0.5845.140-1","116.0.5845.140-1~deb11u1","116.0.5845.140-1~deb12u1","116.0.5845.180-1","116.0.5845.180-1~deb11u1","116.0.5845.180-1~deb12u1","116.0.5845.96-1","116.0.5845.96-1~deb11u1","116.0.5845.96-1~deb12u1","116.0.5845.96-2","117.0.5938.132-1","117.0.5938.132-1~deb11u1","117.0.5938.132-1~deb12u1","117.0.5938.132-2","117.0.5938.149-1","117.0.5938.149-1~deb11u1","117.0.5938.149-1~deb12u1","117.0.5938.62-1","117.0.5938.62-1~deb11u1","117.0.5938.62-1~deb12u1","117.0.5938.92-1","118.0.5993.117-1","118.0.5993.117-1~deb11u1","118.0.5993.117-1~deb12u1","118.0.5993.70-1","118.0.5993.70-1~deb11u1","118.0.5993.70-1~deb12u1","119.0.6045.105-1","119.0.6045.105-1~deb11u1","119.0.6045.105-1~deb12u1","119.0.6045.123-1","119.0.6045.123-1~deb11u1","119.0.6045.123-1~deb12u1","119.0.6045.159-1","119.0.6045.159-1~deb11u1","119.0.6045.159-1~deb12u1","119.0.6045.199-1","119.0.6045.199-1~deb11u1","119.0.6045.199-1~deb12u1","120.0.6099.109-1","120.0.6099.109-1~deb11u1","120.0.6099.109-1~deb12u1","120.0.6099.129-1","120.0.6099.129-1~deb11u1","120.0.6099.129-1~deb12u1","120.0.6099.199-1","120.0.6099.199-1~deb11u1","120.0.6099.199-1~deb12u1","120.0.6099.216-1","120.0.6099.216-1~deb11u1","120.0.6099.216-1~deb12u1","120.0.6099.224-1","120.0.6099.224-1~deb11u1","120.0.6099.224-1~deb12u1","120.0.6099.224-2","120.0.6099.71-1","120.0.6099.71-1~deb11u1","120.0.6099.71-1~deb12u1","121.0.6167.139-1","121.0.6167.139-1~deb12u1","121.0.6167.160-1","121.0.6167.160-1~deb12u1","121.0.6167.85-1","121.0.6167.85-1~deb12u1","122.0.6261.111-1","122.0.6261.111-1~deb12u1","122.0.6261.128-1","122.0.6261.128-1~deb12u1","122.0.6261.57-1","122.0.6261.57-1~deb12u1","122.0.6261.94-1","122.0.6261.94-1~deb12u1","123.0.6312.105-1","123.0.6312.105-1~deb12u1","123.0.6312.105-1~deb13u1","123.0.6312.105-2","123.0.6312.122-1","123.0.6312.122-1~deb12u1","123.0.6312.58-1","123.0.6312.86-1","123.0.6312.86-1~deb12u1","124.0.6367.118-1","124.0.6367.118-1~deb12u1","124.0.6367.155-1","124.0.6367.155-1~deb12u1","124.0.6367.201-1","124.0.6367.201-1~deb12u1","124.0.6367.207-1","124.0.6367.207-1~deb12u1","124.0.6367.60-1","124.0.6367.60-1~deb12u1","124.0.6367.60-2","124.0.6367.78-1","124.0.6367.78-1~deb12u1","125.0.6422.112-1","125.0.6422.112-1~deb12u1","125.0.6422.141-1","125.0.6422.141-1~deb12u1","125.0.6422.60-1","125.0.6422.60-1~deb12u1","125.0.6422.76-1","125.0.6422.76-1~deb12u1","126.0.6478.114-1","126.0.6478.114-1~deb12u1","126.0.6478.126-1","126.0.6478.126-1~deb12u1","126.0.6478.126-1~deb13u1","126.0.6478.182-1","126.0.6478.182-1~deb12u1","126.0.6478.56-1","126.0.6478.56-1~deb12u1","127.0.6533.119-1","127.0.6533.119-1~deb13u1","127.0.6533.88-1","127.0.6533.88-1~deb12u1","127.0.6533.99-1","127.0.6533.99-1~deb12u1","128.0.6613.113-1","128.0.6613.113-1~deb12u1","128.0.6613.113-1~deb13u1","128.0.6613.119-1","128.0.6613.119-1~deb12u1","128.0.6613.137-1","128.0.6613.137-1~deb12u1","128.0.6613.84-1","128.0.6613.84-1~deb12u1","129.0.6668.100-1","129.0.6668.100-1~deb12u1","129.0.6668.100-2","129.0.6668.58-1","129.0.6668.58-1~deb12u1","129.0.6668.70-1","129.0.6668.70-1~deb12u1","129.0.6668.89-1","129.0.6668.89-1~deb12u1","130.0.6723.116-1","130.0.6723.116-1~deb12u1","130.0.6723.58-1","130.0.6723.58-1~deb12u1","130.0.6723.69-1","130.0.6723.69-1~deb12u1","130.0.6723.91-1","130.0.6723.91-1~deb12u1","130.0.6723.91-2","131.0.6778.108-1","131.0.6778.108-1~deb12u1","131.0.6778.139-1","131.0.6778.139-1~deb12u1","131.0.6778.204-1","131.0.6778.204-1~deb12u1","131.0.6778.264-1","131.0.6778.264-1~deb12u1","131.0.6778.85-1","131.0.6778.85-1~deb12u1","132.0.6834.110-1","132.0.6834.110-1~deb12u1","132.0.6834.159-1","132.0.6834.159-1~deb12u1","132.0.6834.83-1","132.0.6834.83-1~deb12u1","133.0.6943.126-1","133.0.6943.126-1~deb12u1","133.0.6943.141-2","133.0.6943.53-1","133.0.6943.53-1~deb12u1","133.0.6943.98-1","133.0.6943.98-1~deb12u1","134.0.6998.117-1","134.0.6998.117-1~deb12u1","134.0.6998.35-1","134.0.6998.35-1~deb12u1","134.0.6998.35-2","134.0.6998.35-3","134.0.6998.88-1","134.0.6998.88-1~deb12u1","135.0.7049.114-1","135.0.7049.52-1","135.0.7049.52-1~deb12u1","135.0.7049.84-1","135.0.7049.84-1~deb12u1","135.0.7049.95-1","135.0.7049.95-1~deb12u1","136.0.7103.113-1","136.0.7103.113-1~deb12u1","136.0.7103.59-2","136.0.7103.59-2~deb12u2","136.0.7103.92-1","136.0.7103.92-1~deb12u1","136.0.7103.92-2","137.0.7151.103-1","137.0.7151.103-1~deb12u1","137.0.7151.119-1","137.0.7151.119-1~deb12u1","137.0.7151.55-1","137.0.7151.55-2","137.0.7151.55-3","137.0.7151.55-3~deb12u1","137.0.7151.68-1","137.0.7151.68-1~deb12u1","138.0.7204.49-1","138.0.7204.49-1~deb12u1","138.0.7204.92-1","138.0.7204.92-1~deb12u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1~deb11u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Mageia:9","package":"webkit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.1-1.2.mga9"}]}],"bundled":52},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.5-1.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150600.12.43.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150200.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-150400.4.122.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-4.41.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-4.41.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"bundled":233},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.3"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.3"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.3"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150600.12.81.4"}]}],"bundled":237},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.6-1ubuntu2"}]}],"versions":["2.48.1-1ubuntu1","2.48.2-1ubuntu1","2.48.2-1ubuntu2","2.48.3-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.5-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"138.0.7204.157-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243}],"products":[{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"visionos"},{"vendor":"apple","product":"watchos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"},{"vendor":"google","product":"chromium"},{"vendor":"webkitgtk","product":"webkitgtk"},{"vendor":"wpewebkit","product":"wpe_webkit"}],"references":[{"url":"https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.html","tags":["Release Notes","advisory","article","report"]},{"url":"https://issues.chromium.org/issues/427162086","tags":["Issue Tracking","Permissions Required","report","article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6558","tags":["government-resource","US Government Resource","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html","tags":["Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Aug/0","tags":["Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/37","tags":["Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/35","tags":["Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/32","tags":["Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/30","tags":["Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/08/02/1","tags":["Mailing List","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/09/30/18","tags":["Mailing List"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6558","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5w32-633g-38jh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-6558","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:13780","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31273","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31278","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43211","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43212","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43216","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43227","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43240","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43265","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6558","tags":["report"]},{"url":"https://bugzilla.redhat.com/2380254","tags":["report"]},{"url":"https://bugzilla.redhat.com/2384385","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386268","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386269","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386270","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386271","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386273","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386274","tags":["report"]},{"url":"https://bugzilla.redhat.com/2386276","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-13780.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:13782","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-13782.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1756751564.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-6558","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0313.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34747","tags":["report"]},{"url":"https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/security/WSA-2025-0007.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/security/WSA-2025-0006.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/07/31/webkitgtk2.49.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/security/WSA-2025-0005.html","tags":["web","article","report"]},{"url":"https://webkitgtk.org/2025/05/28/webkitgtk2.48.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2025/05/14/webkitgtk2.48.2-released.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386273","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2384385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386268","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13780.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6558","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31273","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31278","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31278","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43211","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43212","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43216","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43227","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43240","tags":["advisory"]},{"url":"https://support.apple.com/en-us/124149","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43265","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13782.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14421","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14421.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14422","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14422.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14423","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14423.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14432","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14432.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14433","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14433.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14434","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14434.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14486","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14486.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:15729","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15729.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:13780","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:13782","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502765-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247562","tags":["report"]},{"url":"https://bugzilla.suse.com/1247563","tags":["report"]},{"url":"https://bugzilla.suse.com/1247564","tags":["report"]},{"url":"https://bugzilla.suse.com/1247595","tags":["report"]},{"url":"https://bugzilla.suse.com/1247596","tags":["report"]},{"url":"https://bugzilla.suse.com/1247597","tags":["report"]},{"url":"https://bugzilla.suse.com/1247598","tags":["report"]},{"url":"https://bugzilla.suse.com/1247599","tags":["report"]},{"url":"https://bugzilla.suse.com/1247600","tags":["report"]},{"url":"https://bugzilla.suse.com/1247742","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-54467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6558","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502766-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502777-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502973-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239547","tags":["report"]},{"url":"https://bugzilla.suse.com/1239863","tags":["report"]},{"url":"https://bugzilla.suse.com/1239864","tags":["report"]},{"url":"https://bugzilla.suse.com/1247565","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624225-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1275791","tags":["report"]},{"url":"https://bugzilla.suse.com/1277005","tags":["report"]},{"url":"https://bugzilla.suse.com/1277006","tags":["report"]},{"url":"https://bugzilla.suse.com/1277007","tags":["report"]},{"url":"https://bugzilla.suse.com/1277009","tags":["report"]},{"url":"https://bugzilla.suse.com/1277010","tags":["report"]},{"url":"https://bugzilla.suse.com/1277011","tags":["report"]},{"url":"https://bugzilla.suse.com/1277012","tags":["report"]},{"url":"https://bugzilla.suse.com/1277013","tags":["report"]},{"url":"https://bugzilla.suse.com/1277014","tags":["report"]},{"url":"https://bugzilla.suse.com/1277016","tags":["report"]},{"url":"https://bugzilla.suse.com/1277017","tags":["report"]},{"url":"https://bugzilla.suse.com/1277018","tags":["report"]},{"url":"https://bugzilla.suse.com/1281116","tags":["report"]},{"url":"https://bugzilla.suse.com/1284619","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9998","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264676-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264858-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276418","tags":["report"]},{"url":"https://bugzilla.suse.com/1277001","tags":["report"]},{"url":"https://bugzilla.suse.com/1277004","tags":["report"]},{"url":"https://bugzilla.suse.com/1277015","tags":["report"]},{"url":"https://bugzilla.suse.com/1277755","tags":["report"]},{"url":"https://bugzilla.suse.com/1285528","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83596","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-6558","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7702-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-31273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43265","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7657","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-6558","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:12:36.848Z","modified":"2026-10-01T01:35:11.329Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:40.774223Z"}],"euvd":[{"id":"EUVD-2025-21546","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:12:36Z","modified":"2026-10-01T01:35:11Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2025-07-22","updated_at":"2026-11-02T17:27:46.94346Z"}],"ghsa":[{"id":"GHSA-5w32-633g-38jh","title":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204...","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:31:26Z","modified":"2026-10-01T03:31:11Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:12:39.341866Z"}],"kev":[{"id":"CVE-2025-6558","title":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","description":"Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","cwes":["CWE-20"],"kev":{"date_added":"2025-07-22","due_date":"2025-08-12","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-6558","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:15:24.533Z","modified":"2026-10-01T12:00:53.397Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:11:18.285862Z"}],"osv":[{"id":"ALPINE-CVE-2025-6558","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:15:24.533Z","modified":"2026-11-03T06:32:34.128703267Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2025-6558","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:15:24.533Z","modified":"2026-10-22T18:12:14.68234301Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:52.202386Z"},{"id":"DEBIAN-CVE-2025-6558","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:15:24.533Z","modified":"2026-10-02T08:47:18.868851692Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"RHSA-2025:13780","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-14T10:04:42Z","modified":"2026-06-30T11:03:32.701010003Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:13782","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-14T10:04:43Z","modified":"2026-06-30T10:15:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14421","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-25T10:02:45Z","modified":"2026-06-30T10:15:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14422","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-25T10:02:46Z","modified":"2026-06-30T10:15:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14423","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-25T10:02:47Z","modified":"2026-06-30T10:16:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14432","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-25T10:02:48Z","modified":"2026-06-30T11:03:32.926464179Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14433","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-25T10:02:48Z","modified":"2026-06-30T10:16:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14434","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-25T10:02:49Z","modified":"2026-06-30T11:03:32.92887058Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:14486","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-08-26T10:03:01Z","modified":"2026-06-30T10:16:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:15729","title":"Red Hat Security Advisory: webkitgtk4 security update","status":"published","published":"2025-09-15T10:02:19Z","modified":"2026-06-30T10:17:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RLSA-2025:13780","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* angle: insufficient input validation can cause undefined behavior (CVE-2025-6558)\n\n* webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278)\n\n* webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216)\n\n* webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227)\n\n* webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-09-08T14:19:16.612452Z","modified":"2025-09-08T15:03:16.188174Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:13782","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* angle: insufficient input validation can cause undefined behavior (CVE-2025-6558)\n\n* webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278)\n\n* webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216)\n\n* webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227)\n\n* webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:40:14.564183Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-6558","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:15:00Z","modified":"2026-10-08T12:53:26.127020511Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"ALSA-2025:13780","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * angle: insufficient input validation can cause undefined behavior (CVE-2025-6558)\n  * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278)\n  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216)\n  * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227)\n  * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-08-13T00:00:00Z","modified":"2026-10-29T11:02:22.339163379Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:13782","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * angle: insufficient input validation can cause undefined behavior (CVE-2025-6558)\n  * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278)\n  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216)\n  * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227)\n  * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-08-13T00:00:00Z","modified":"2026-10-29T11:32:27.581799691Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-65586","title":"CVE-2025-6558 affecting package qt5-qtbase for versions less than 5.12.11-18","description":"Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-07-15T18:15:24Z","modified":"2026-04-21T04:37:38.651735Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"CLSA-2025-1756751564","title":"webkit2gtk3: Fix of 18 CVEs","description":"- Update to 2.48.5. The following CVEs were fixed:\n- CVE-2025-6558: fix processing maliciously crafted web content which may\n  lead to an unexpected Safari crash\n- CVE-2025-31273: fix processing maliciously crafted web content which may\n  lead to memory corruption\n- CVE-2025-31278: fix processing maliciously crafted web content which may\n  lead to memory corruption\n- CVE-2025-43212: fix processing maliciously crafted web content which may\n  lead to an unexpected Safari crash\n- CVE-2025-43216: fix processing maliciously crafted web content which may\n  lead to an unexpected Safari crash\n- CVE-2025-43228: fix issue with visiting a malicious website which may lead\n  to address bar spoofing\n- CVE-2025-24189: fix processing maliciously crafted web content which may\n  lead to memory corruption\n- CVE-2025-31205: fix issue with a malicious website which may exfiltrate\n  data cross-origin\n- CVE-2025-24208: fix loading a malicious iframe which may lead to a cross-site\n  scripting attack\n- CVE-2024-54551: fix processing web content which may lead to a denial-of-service\n- CVE-2024-44192: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-54467: fix issue with a malicious website which may exfiltrate\n  data cross-origin\n- CVE-2025-24162: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-54502: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-44244: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-44185: fix processing maliciously crafted web content which may\n  lead to an unexpected process crash\n- CVE-2024-44187: fix issue wit a malicious website may exfiltrate data\n  cross-origin\n- CVE-2024-40866: fix issue with visiting a malicious website which may lead\n  to address bar spoofing","status":"published","published":"2025-09-15T07:50:41Z","modified":"2026-10-21T10:46:16.245508231Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"DLA-4276-1","title":"webkit2gtk - security update","status":"published","published":"2025-08-20T00:00:00Z","modified":"2026-03-09T02:10:02.631613Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5963-1","title":"chromium - security update","status":"published","published":"2025-07-17T00:00:00Z","modified":"2026-03-09T02:10:08.520789Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-5978-1","title":"webkit2gtk - security update","status":"published","published":"2025-08-18T00:00:00Z","modified":"2026-03-09T02:10:00.680743Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0313","title":"Updated webkit2 packages fix security vulnerabilities","description":"We are updating webkit2 to version 2.50.1 that has many security fixes\nsince our current version.\nPlease see the links for additional information\n","status":"published","published":"2025-11-25T19:41:03Z","modified":"2026-04-16T04:43:57.583521705Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15350-1","title":"chromedriver-138.0.7204.157-1.1 on GA media","description":"These are all security issues fixed in the chromedriver-138.0.7204.157-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-17T00:00:00Z","modified":"2026-03-23T04:53:40.552677Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:22076-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791):\n- CVE-2026-28984: A memory handling issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-43804: A vulnerability that may lead to an app denial-of-service when visiting a website was addressed through improved state management.\n- CVE-2026-64713: A vulnerability that may allow websites to know if the user has visited a given link was addressed with improved checks.\n- CVE-2026-64719: An out-of-bounds access issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-64728: A permissions issue that may allow maliciously crafted web content to violate iframe sandboxing policy was addressed with improved validation.\n- CVE-2026-64730: A vulnerability that may lead to UI spoofing when visiting a website that frames malicious content was addressed with improved UI.\n- CVE-2026-64757: A memory corruption issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-64783: A use-after-free issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64787: A use-after-free issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved memory management.\n\nChanges for webkit2gtk3:\n\n- Update to version 2.54.1\n","status":"published","published":"2026-10-09T13:47:46Z","modified":"2026-10-19T17:23:12.640514058Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2025:02765-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdated to version 2.48.5: \n  - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)\n  - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)\n  - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)\n  - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)\n  - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596)\n  - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597)\n  - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598)\n  - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599)\n  - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600)\n  - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742)\n\nOther fixes:\n- Improve emoji font selection with USE_SKIA=ON.\n- Improve playback of multimedia streams from blob URLs.\n- Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n  USE_SYSPROF_CAPTURE=ON.\n- Fix crash when using a WebKitWebView widget in an offscreen\n  window.\n- Fix several crashes and rendering issues.\n- Fix a crash introduced by the new threaded rendering\n  implementation using Skia API.\n- Improve rendering performance by recording layers once and\n  replaying every dirty region in different worker threads.\n- Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n- Fix a reference cycle in webkitmediastreamsrc preventing its\n  disposal.\n- Increase mem_per_process again to avoid running out of memory.\n\n  ","status":"published","published":"2025-08-12T12:59:26Z","modified":"2026-03-23T04:46:47.191619Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02766-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdated to version 2.48.5:                                                                                                                                                                                                                                                          \n  - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)                                                                                                                                           \n  - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)                                                                                                                                             \n  - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)                                                                                                                                                               \n  - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)                                                                                                                                    \n  - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596)                                                                                                                                    \n  - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597)                                                                                                                                   \n  - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598)                                                                                                                                                        \n  - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599)                                                                                                                                                                    \n  - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600)                                                                                                                                   \n  - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742)\n\nOther fixes:\n- Improve emoji font selection with USE_SKIA=ON.\n- Improve playback of multimedia streams from blob URLs.\n- Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n  USE_SYSPROF_CAPTURE=ON.\n- Fix crash when using a WebKitWebView widget in an offscreen\n  window.\n- Fix several crashes and rendering issues.\n- Fix a crash introduced by the new threaded rendering\n  implementation using Skia API.\n- Improve rendering performance by recording layers once and\n  replaying every dirty region in different worker threads.\n- Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n- Fix a reference cycle in webkitmediastreamsrc preventing its\n  disposal.\n- Increase mem_per_process again to avoid running out of memory.\n","status":"published","published":"2025-08-12T13:00:40Z","modified":"2026-03-23T04:49:45.959969Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02777-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdated to version 2.48.5: \n  - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564)\n  - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web content may lead to memory corruption. (bsc#1247563)\n  - CVE-2025-43211: Fixed a vulnerability where processing web content may lead to a denial-of-service. (bsc#1247562)\n  - CVE-2025-43212: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247595)\n  - CVE-2025-43216: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247596)\n  - CVE-2025-43227: Fixed a vulnerability where processing maliciously crafted web content may disclose sensitive user information. (bsc#1247597)\n  - CVE-2025-43228: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1247598)\n  - CVE-2025-43240: Fixed a vulnerability where a download's origin may be incorrectly associated. (bsc#1247599)\n  - CVE-2025-43265: Fixed a vulnerability where processing maliciously crafted web content may disclose internal states of the app. (bsc#1247600)\n  - CVE-2025-6558: Fixed a vulnerability where processing maliciously crafted web content may lead to an unexpected Safari crash. (bsc#1247742)\n\nOther fixes:\n- Improve emoji font selection with USE_SKIA=ON.\n- Improve playback of multimedia streams from blob URLs.\n- Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n  USE_SYSPROF_CAPTURE=ON.\n- Fix crash when using a WebKitWebView widget in an offscreen\n  window.\n- Fix several crashes and rendering issues.\n- Fix a crash introduced by the new threaded rendering\n  implementation using Skia API.\n- Improve rendering performance by recording layers once and\n  replaying every dirty region in different worker threads.\n- Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n- Fix a reference cycle in webkitmediastreamsrc preventing its\n  disposal.\n- Increase mem_per_process again to avoid running out of memory.\n","status":"published","published":"2025-08-13T06:44:04Z","modified":"2026-02-04T04:30:38.235533Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02973-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- Update to version 2.48.5: \n  + CVE-2025-31273: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247564)\n  + CVE-2025-43265: Fixed processing maliciously crafted web content disclosing internal states of the app (bsc#1247600)\n  + CVE-2025-43216: Fixed processing maliciously crafted web content leading to an unexpected Safari crash (bsc#1247596)\n  + CVE-2025-31278: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247563)\n  + CVE-2025-6558: Fixed processing maliciously crafted web content leading to an unexpected Safari crash. (bsc#1247742)\n  + CVE-2025-43227: Fixed Processing maliciously crafted web content disclosing sensitive user information (bsc#1247597)\n  + CVE-2025-43240: Fixed download’s origin incorrectly associated (bsc#1247599)\n  + CVE-2025-43228: Fixed visiting a malicious website leading to address bar spoofing (bsc#1247598)\n  + CVE-2025-43212: Fixed processing maliciously crafted web content leading to an unexpected Safari crash (bsc#1247595)\n  + CVE-2025-43211: Fixed processing web content leading to a denial-of-service (bsc#1247562) \n  + Fix several crashes.\n  + Changes in version 2.48.4:\n  + Improve emoji font selection with USE_SKIA=ON.\n  + Improve playback of multimedia streams from blob URLs.\n  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and\n    USE_SYSPROF_CAPTURE=ON.\n  + Fix the build on LoongArch with USE_SKIA=ON.\n  + Fix crash when using a WebKitWebView widget in an offscreen\n    window.\n  + Fix several crashes and rendering issues.\n  + Changes in version 2.48.3:\n  + Fix a crash introduced by the new threaded rendering\n    implementation using Skia API.\n  + Improve rendering performance by recording layers once and\n    replaying every dirty region in different worker threads.\n  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.\n  + Fix a reference cycle in webkitmediastreamsrc preventing its\n    disposal.\n\n- CVE-2024-44192:Fixed processing maliciously crafted web content leading to an unexpected process crash (bsc#1239863)\n- CVE-2024-54467: Fixed data cross-origin exfiltration due to a cookie management issue (bsc#1239864)\n- CVE-2025-24201: Fixed out-of-bounds write vulnerability (bsc#1239547)\n- CVE-2025-24189: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247565)\n  ","status":"published","published":"2025-08-25T08:49:16Z","modified":"2026-03-23T04:45:44.236708Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2026:24225-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791):\n- CVE-2026-28984: A memory handling issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-43804: A vulnerability that may lead to an app denial-of-service when visiting a website was addressed through improved state management.\n- CVE-2026-64713: A vulnerability that may allow websites to know if the user has visited a given link was addressed with improved checks.\n- CVE-2026-64719: An out-of-bounds access issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-64728: A permissions issue that may allow maliciously crafted web content to violate iframe sandboxing policy was addressed with improved validation.\n- CVE-2026-64730: A vulnerability that may lead to UI spoofing when visiting a website that frames malicious content was addressed with improved UI.\n- CVE-2026-64757: A memory corruption issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-64783: A use-after-free issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64787: A use-after-free issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved memory management.\n\nChanges for webkit2gtk3:\n\n- Update to version 2.54.1\n","status":"published","published":"2026-10-09T14:15:27Z","modified":"2026-10-21T17:23:11.047122438Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4676-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n  \nChanges for webkit2gtk3:\n\n- Update to version 2.54.1 \n","status":"published","published":"2026-10-14T14:47:47Z","modified":"2026-10-15T10:30:36.282307012Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4858-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nSecurity issues fixed:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to\n  remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local\n  escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of\n  SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local\n  escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory\n  write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp\n  could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of\n  privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local\n  information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon\n  successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory\n  access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised\n  the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially\n  perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary\n  code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially\n  sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack\n  corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially\n  sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds\n  memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform\n  out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially\n  perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML\n  page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised\n  the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised\n  the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML\n  page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially\n  sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised\n  the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a\n  sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially\n  perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain\n  potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of\n  bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of\n  bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory\n  access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory\n  access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted\n  web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds\n  memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin\n  data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a\n  sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a\n  sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously\n  crafted web content was addressed with improved memory management.\n- CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash\n  (bsc#1277001).  \n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted\n  web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed\n  with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously\n  crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously\n  crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted\n  web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web\n  content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was\n  addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content\n  was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform\n  a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin\n  policy via a crafted HTML page.\n- CVE-2026-78376: use-after-free of `JSCValue` function parameters (bsc#1276418).\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary\n  code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary\n  code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary\n  code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory\n  inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data\n  via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory\n  inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute\n  arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data\n  via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain\n  cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code\n  outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside\n  the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code\n  outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a\n  crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside\n  the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute\n  arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute\n  arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web\n  origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the\n  sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside\n  the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-83596: webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (bsc#1277755).\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted\n  web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted\n  webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a\n  sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a\n  crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox\n  escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary\n  code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory\n  read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform\n  out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption\n  via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the\n  renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a\n  sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a\n  crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a\n  sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive\n  information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap\n  corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to\n  execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised\n  the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially\n  sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had\n  compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a\n  sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer\n  process to potentially perform a sandbox escape via a crafted HTML page.\n  \nChanges for webkit2gtk3:\n\n- Update to version 2.54.1\n","status":"published","published":"2026-10-22T09:58:04Z","modified":"2026-10-22T18:00:58.595080127Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-7702-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","status":"published","published":"2025-08-19T15:20:35Z","modified":"2026-04-27T18:17:06.687733441Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}