{"id":"CVE-2026-28946","aliases":["ALSA-2026:25918","ALSA-2026:25927","CLSA-2026-1782217586","DEBIAN-CVE-2026-28946","EUVD-2026-29254","GHSA-ch66-7v2f-mvh2","RHSA-2026:25918","RHSA-2026:25927","RHSA-2026:27728","RHSA-2026:27785","RHSA-2026:27804","RHSA-2026:28114","RHSA-2026:28146","RHSA-2026:28147","RHSA-2026:28148","RLSA-2026:25918","RLSA-2026:25927","ROOT-OS-DEBIAN-12-CVE-2026-28946","SUSE-SU-2026:22203-1","SUSE-SU-2026:22212-1","SUSE-SU-2026:2376-1","SUSE-SU-2026:2378-1","SUSE-SU-2026:2623-1","UBUNTU-CVE-2026-28946","USN-8703-1","openSUSE-SU-2026:21129-1"],"status":"published","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in...","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00393,"percentile":0.33782,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-05-11T20:08:30Z","modified":"2026-10-29T11:42:19Z","fixes":[{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.52.5-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.52.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.52.4-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"webkit2gtk","fixed_in":["2.50.6-1~deb12u2.aikido.3","2.50.6-1~deb12u2.aikido.4","2.50.6-1~deb12u2.aikido.5","2.50.6-1~deb12u2.aikido.6","2.50.6-1~deb12u2.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-webkit2gtk","fixed_in":["2.50.6-1~deb12u2.aikido.3","2.50.6-1~deb12u2.aikido.4","2.50.6-1~deb12u2.aikido.5","2.50.6-1~deb12u2.aikido.6","2.50.6-1~deb12u2.aikido.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","fixed_in":["2.52.6-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","fixed_in":["2.52.6-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1","2.52.4-1","2.52.5-1","2.52.5-1~deb13u1","2.52.6-1","2.52.6-1~deb13u1","2.53.1-1","2.53.2-1","2.53.3-1","2.53.4-1","2.53.90-1","2.53.91-1","2.53.92-1","2.54.0-1","2.54.0-1~deb13u1","2.54.0-1~deb13u2","2.54.0-1~deb13u3","2.54.0-1~exp1","2.54.1-1","2.54.2-1","2.54.2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1","2.52.4-1"]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":16},{"source":"osv","ecosystem":"Root:Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1~deb12u2.aikido.3"},{"fixed":"2.50.6-1~deb12u2.aikido.4"},{"fixed":"2.50.6-1~deb12u2.aikido.5"},{"fixed":"2.50.6-1~deb12u2.aikido.6"},{"fixed":"2.50.6-1~deb12u2.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1~deb12u2.aikido.3"},{"fixed":"2.50.6-1~deb12u2.aikido.4"},{"fixed":"2.50.6-1~deb12u2.aikido.5"},{"fixed":"2.50.6-1~deb12u2.aikido.6"},{"fixed":"2.50.6-1~deb12u2.aikido.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-4.60.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-4.60.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1","2.48.5-0ubuntu0.22.04.1","2.48.7-0ubuntu0.22.04.2","2.50.1-0ubuntu0.22.04.1","2.50.2-0ubuntu0.22.04.2","2.50.3-0ubuntu0.22.04.1","2.50.4-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1","2.50.2-0ubuntu0.24.04.2","2.50.3-0ubuntu0.24.04.1","2.50.4-0ubuntu0.24.04.1","2.52.3-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.26.04.1"}]}],"versions":["2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.1-1ubuntu1","2.50.2-1ubuntu1","2.50.3-1ubuntu1","2.50.4-1ubuntu1","2.51.91-1","2.51.92-1","2.52.0-1","2.52.3-0ubuntu0.26.04.2","2.52.3-0ubuntu0.26.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1","2.50.2-0ubuntu0.24.04.2","2.50.3-0ubuntu0.24.04.1","2.50.4-0ubuntu0.24.04.1","2.52.3-0ubuntu0.24.04.1"],"bundled":47},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.26.04.1"}]}],"versions":["2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.1-1ubuntu1","2.50.2-1ubuntu1","2.50.3-1ubuntu1","2.50.4-1ubuntu1","2.51.91-1","2.51.92-1","2.52.0-1","2.52.3-0ubuntu0.26.04.2","2.52.3-0ubuntu0.26.04.3"],"bundled":47},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16}],"products":[{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://support.apple.com/en-us/127115","tags":["Release Notes","Vendor Advisory","article"]},{"url":"https://support.apple.com/en-us/127121"},{"url":"https://access.redhat.com/security/cve/CVE-2026-28946","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2471790","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28946.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27728","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25918","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27785","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28114","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27804","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28148","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28146","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28147","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25927","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28946","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ch66-7v2f-mvh2"},{"url":"https://access.redhat.com/security/cve/CVE-2026-28847","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28883","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28901","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28902","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28903","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28904","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28905","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28907","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28942","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28947","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28953","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28955","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28958","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43658","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43660","tags":["report"]},{"url":"https://bugzilla.redhat.com/2471790","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483956","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483957","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483958","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483959","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483960","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483961","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483963","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483964","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483965","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483966","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483967","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483968","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483969","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-25918.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-28984.html","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-25927.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782217586.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28958","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43660","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-28946","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483969","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25918.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28847","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0003.html","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28883","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28901","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28902","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28903","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28904","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28905","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28907","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28942","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28946","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28947","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28953","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28955","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28958","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28984","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0005.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43658","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43660","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25927.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27728.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27785.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27804.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28114.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28146.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28147.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28148.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25918","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25927","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622203-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267506","tags":["report"]},{"url":"https://bugzilla.suse.com/1267507","tags":["report"]},{"url":"https://bugzilla.suse.com/1267508","tags":["report"]},{"url":"https://bugzilla.suse.com/1267509","tags":["report"]},{"url":"https://bugzilla.suse.com/1267510","tags":["report"]},{"url":"https://bugzilla.suse.com/1267511","tags":["report"]},{"url":"https://bugzilla.suse.com/1267512","tags":["report"]},{"url":"https://bugzilla.suse.com/1267513","tags":["report"]},{"url":"https://bugzilla.suse.com/1267514","tags":["report"]},{"url":"https://bugzilla.suse.com/1267515","tags":["report"]},{"url":"https://bugzilla.suse.com/1267516","tags":["report"]},{"url":"https://bugzilla.suse.com/1267517","tags":["report"]},{"url":"https://bugzilla.suse.com/1267518","tags":["report"]},{"url":"https://bugzilla.suse.com/1267519","tags":["report"]},{"url":"https://bugzilla.suse.com/1267520","tags":["report"]},{"url":"https://bugzilla.suse.com/1267521","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43660","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622212-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262376-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264745","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262378-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262623-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-28946","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8703-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-28847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-39872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64787","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-28946","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","status":"published","published":"2026-05-11T20:08:30.995Z","modified":"2026-07-15T01:11:01.073Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416","CWE-416"],"updated_at":"2026-11-02T14:20:01.969981Z"}],"euvd":[{"id":"EUVD-2026-29254","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","status":"published","published":"2026-05-11T20:08:30Z","modified":"2026-07-15T01:11:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:55.842782Z"}],"ghsa":[{"id":"GHSA-ch66-7v2f-mvh2","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in...","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","status":"published","published":"2026-05-11T21:31:38Z","modified":"2026-06-30T03:37:45Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:09:05.934873Z"}],"nvd":[{"id":"CVE-2026-28946","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","status":"published","published":"2026-05-11T21:18:55.74Z","modified":"2026-10-26T18:10:00.173Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:18.239974Z"}],"osv":[{"id":"DEBIAN-CVE-2026-28946","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","status":"published","published":"2026-05-11T21:18:55.74Z","modified":"2026-10-27T10:00:55.640640713Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"RHSA-2026:25918","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-15T10:05:46Z","modified":"2026-10-01T10:08:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25927","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-16T10:06:24Z","modified":"2026-10-01T10:08:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27728","title":"Red Hat Security Advisory: webkitgtk4 security update","status":"published","published":"2026-06-22T10:06:43Z","modified":"2026-10-01T10:08:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27785","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-22T10:06:53Z","modified":"2026-10-01T10:08:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27804","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-23T10:08:09Z","modified":"2026-10-01T10:08:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28114","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-23T10:08:28Z","modified":"2026-10-01T10:08:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28146","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-24T10:08:24Z","modified":"2026-10-01T10:09:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28147","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-26T11:45:45Z","modified":"2026-10-01T10:09:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28148","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-24T10:08:25Z","modified":"2026-10-01T10:09:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:25918","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n\n* webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T06:00:26.379988Z","modified":"2026-06-17T06:30:05.797684685Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:25927","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n\n* webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T12:03:08.073041Z","modified":"2026-06-17T12:30:04.653210526Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-28946","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.","status":"published","published":"2026-08-21T00:00:00Z","modified":"2026-09-02T19:35:32.19415607Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"ALSA-2026:25918","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-15T00:00:00Z","modified":"2026-10-29T11:12:03.146249386Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:25927","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-15T00:00:00Z","modified":"2026-10-29T11:42:19.468012609Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"CLSA-2026-1782217586","title":"webkit2gtk3: Fix of 17 CVEs","description":"- Rebase to webkitgtk 2.52.4 to address WebKitGTK security advisory\n  WSA-2026-0003 (16 CVEs).\n- Refresh libsoup2.patch for 2.52.4 library version triplet bumps\n  (WEBKIT 21/8/21, JAVASCRIPTCORE 10/12/10 on API 4.1;\n  WEBKIT 20/8/16, JAVASCRIPTCORE 8/12/7 on API 6.0).\n- Drop aarch64-build.patch — the upstream cherry-pick (Apple fix for\n  WebKit bug 306638) is included in 2.52.4.\n- Add fix-system-malloc-llint-extractor.patch (upstream cherry-pick\n  314364@main, bugs.webkit.org/show_bug.cgi?id=316083) to gate\n  bmalloc_CopyHeaders in LLIntSettingsExtractor/LLIntOffsetsExtractor\n  dependencies on (NOT USE_SYSTEM_MALLOC). Without it, CMake configure\n  fails on aarch64 because USE_64KB_PAGE_BLOCK=ON forces\n  USE_SYSTEM_MALLOC=ON, which prevents the bmalloc subdirectory from\n  being added and the bmalloc_CopyHeaders target from being created.\n- CVEs resolved by this rebase (WSA-2026-0003):\n  CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902,\n  CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907,\n  CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953,\n  CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660","status":"published","published":"2026-07-20T09:05:48Z","modified":"2026-10-26T09:30:22.280890172Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"openSUSE-SU-2026:21129-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:17:07Z","modified":"2026-06-30T18:24:44.059491718Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-28946","title":"CVE-2026-28946 in webkit2gtk - Patched by Root","description":"Root has patched CVE-2026-28946 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-07T18:20:06Z","modified":"2026-10-07T19:15:04.520660499Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"SUSE-SU-2026:22203-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:32:16Z","modified":"2026-06-24T09:00:08.068759511Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22212-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:32:16Z","modified":"2026-06-24T09:00:11.84636551Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2376-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n \nUpdate to version 2.52.4:\n\nSecurity fixes:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nOther fixes:\n\n- Add patch to fix a crash on evolution (bsc#1264745).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-11T16:07:25Z","modified":"2026-06-12T08:45:07.127570023Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2378-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-11T16:10:23Z","modified":"2026-06-12T08:45:07.094928571Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2623-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903,, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-24T12:45:43Z","modified":"2026-06-25T06:15:06.971817007Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-8703-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","status":"published","published":"2026-08-31T12:46:51Z","modified":"2026-08-31T22:26:22.372464162Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}