{"id":"CVE-2026-28958","aliases":["ALSA-2026:25918","ALSA-2026:25927","CLSA-2026-1782216821","CLSA-2026-1782217586","DEBIAN-CVE-2026-28958","EUVD-2026-29263","GHSA-qwj9-ffgq-f34w","RHSA-2026:25918","RHSA-2026:25927","RHSA-2026:27728","RHSA-2026:27785","RHSA-2026:27804","RHSA-2026:28114","RHSA-2026:28146","RHSA-2026:28147","RHSA-2026:28148","RLSA-2026:25918","RLSA-2026:25927","SUSE-SU-2026:22203-1","SUSE-SU-2026:22212-1","SUSE-SU-2026:2376-1","SUSE-SU-2026:2378-1","SUSE-SU-2026:2623-1","UBUNTU-CVE-2026-28958","USN-8703-1","openSUSE-SU-2026:21129-1"],"status":"published","title":"This issue was addressed with improved data protection. This issue is fixed in iOS 26.5 and...","description":"This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.0014,"percentile":0.03364,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2026-05-11T20:07:51Z","modified":"2026-10-29T11:42:19Z","fixes":[{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.52.5-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.52.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.52.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","fixed_in":["2.52.6-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","fixed_in":["2.52.6-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1","2.52.4-1","2.52.5-1","2.52.5-1~deb13u1","2.52.6-1","2.52.6-1~deb13u1","2.53.1-1","2.53.2-1","2.53.3-1","2.53.4-1","2.53.90-1","2.53.91-1","2.53.92-1","2.54.0-1","2.54.0-1~deb13u1","2.54.0-1~deb13u2","2.54.0-1~deb13u3","2.54.0-1~exp1","2.54.1-1","2.54.2-1","2.54.2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1","2.52.4-1"]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-4.60.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-4.60.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1","2.48.5-0ubuntu0.22.04.1","2.48.7-0ubuntu0.22.04.2","2.50.1-0ubuntu0.22.04.1","2.50.2-0ubuntu0.22.04.2","2.50.3-0ubuntu0.22.04.1","2.50.4-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1","2.50.2-0ubuntu0.24.04.2","2.50.3-0ubuntu0.24.04.1","2.50.4-0ubuntu0.24.04.1","2.52.3-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.26.04.1"}]}],"versions":["2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.1-1ubuntu1","2.50.2-1ubuntu1","2.50.3-1ubuntu1","2.50.4-1ubuntu1","2.51.91-1","2.51.92-1","2.52.0-1","2.52.3-0ubuntu0.26.04.2","2.52.3-0ubuntu0.26.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1","2.50.2-0ubuntu0.24.04.2","2.50.3-0ubuntu0.24.04.1","2.50.4-0ubuntu0.24.04.1","2.52.3-0ubuntu0.24.04.1"],"bundled":47},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.26.04.1"}]}],"versions":["2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.1-1ubuntu1","2.50.2-1ubuntu1","2.50.3-1ubuntu1","2.50.4-1ubuntu1","2.51.91-1","2.51.92-1","2.52.0-1","2.52.3-0ubuntu0.26.04.2","2.52.3-0ubuntu0.26.04.3"],"bundled":47},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"visionos"}],"references":[{"url":"https://support.apple.com/en-us/127110","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127115","tags":["Release Notes","Vendor Advisory","article"]},{"url":"https://support.apple.com/en-us/127120","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127121"},{"url":"https://support.apple.com/en-us/148287"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28958","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qwj9-ffgq-f34w"},{"url":"https://access.redhat.com/errata/RHSA-2026:25918","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28847","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28883","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28901","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28902","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28903","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28904","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28905","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28907","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28942","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28946","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28947","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28953","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28955","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28958","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43658","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43660","tags":["report"]},{"url":"https://bugzilla.redhat.com/2471790","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483956","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483957","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483958","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483959","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483960","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483961","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483963","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483964","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483965","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483966","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483967","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483968","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483969","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-25918.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-28984.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25927","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-25927.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782216821.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43660","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782217586.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43214","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-28958","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2471790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483969","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25918.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28847","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0003.html","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28883","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28901","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28902","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28903","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28904","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28905","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28907","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28942","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28946","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28947","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28953","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28955","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28958","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28984","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0005.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43658","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43660","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25927.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27728","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27728.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27785","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27785.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27804","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27804.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28114","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28114.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28146","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28146.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28147","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28147.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28148","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28148.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25918","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25927","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622203-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267506","tags":["report"]},{"url":"https://bugzilla.suse.com/1267507","tags":["report"]},{"url":"https://bugzilla.suse.com/1267508","tags":["report"]},{"url":"https://bugzilla.suse.com/1267509","tags":["report"]},{"url":"https://bugzilla.suse.com/1267510","tags":["report"]},{"url":"https://bugzilla.suse.com/1267511","tags":["report"]},{"url":"https://bugzilla.suse.com/1267512","tags":["report"]},{"url":"https://bugzilla.suse.com/1267513","tags":["report"]},{"url":"https://bugzilla.suse.com/1267514","tags":["report"]},{"url":"https://bugzilla.suse.com/1267515","tags":["report"]},{"url":"https://bugzilla.suse.com/1267516","tags":["report"]},{"url":"https://bugzilla.suse.com/1267517","tags":["report"]},{"url":"https://bugzilla.suse.com/1267518","tags":["report"]},{"url":"https://bugzilla.suse.com/1267519","tags":["report"]},{"url":"https://bugzilla.suse.com/1267520","tags":["report"]},{"url":"https://bugzilla.suse.com/1267521","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43660","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622212-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262376-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264745","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262378-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262623-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-28958","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8703-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-28847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-39872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64787","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-28958","description":"This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","status":"published","published":"2026-05-11T20:07:51.789Z","modified":"2026-08-17T21:29:51.52Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:20:01.969981Z"}],"euvd":[{"id":"EUVD-2026-29263","description":"This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","status":"published","published":"2026-05-11T20:07:51Z","modified":"2026-08-17T21:29:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:48.026284Z"}],"ghsa":[{"id":"GHSA-qwj9-ffgq-f34w","title":"This issue was addressed with improved data protection. This issue is fixed in iOS 26.5 and...","description":"This issue was addressed with improved data protection. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","status":"published","published":"2026-05-11T21:31:39Z","modified":"2026-08-18T00:30:25Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:10:35.189726Z"}],"nvd":[{"id":"CVE-2026-28958","description":"This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","status":"published","published":"2026-05-11T21:18:56.887Z","modified":"2026-10-26T18:10:00.173Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:12:18.239974Z"}],"osv":[{"id":"DEBIAN-CVE-2026-28958","description":"This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","status":"published","published":"2026-05-11T21:18:56.887Z","modified":"2026-10-27T10:00:33.311801332Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"RHSA-2026:25918","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-15T10:05:46Z","modified":"2026-10-01T10:08:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25927","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-16T10:06:24Z","modified":"2026-10-01T10:08:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27728","title":"Red Hat Security Advisory: webkitgtk4 security update","status":"published","published":"2026-06-22T10:06:43Z","modified":"2026-10-01T10:08:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27785","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-22T10:06:53Z","modified":"2026-10-01T10:08:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27804","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-23T10:08:09Z","modified":"2026-10-01T10:08:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28114","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-23T10:08:28Z","modified":"2026-10-01T10:08:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28146","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-24T10:08:24Z","modified":"2026-10-01T10:09:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28147","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-26T11:45:45Z","modified":"2026-10-01T10:09:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28148","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-24T10:08:25Z","modified":"2026-10-01T10:09:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:25918","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n\n* webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T06:00:26.379988Z","modified":"2026-06-17T06:30:05.797684685Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:25927","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n\n* webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T12:03:08.073041Z","modified":"2026-06-17T12:30:04.653210526Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-28958","description":"This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.","status":"published","published":"2026-08-21T00:00:00Z","modified":"2026-09-02T19:36:03.779805026Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"ALSA-2026:25918","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-15T00:00:00Z","modified":"2026-10-29T11:12:03.146249386Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:25927","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-15T00:00:00Z","modified":"2026-10-29T11:42:19.468012609Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"CLSA-2026-1782216821","title":"webkit2gtk3: Fix of 16 CVEs","description":"- CVE-2026-28907: align ContentSecurityPolicySource::pathMatches() with the CSP3\n  path-matching algorithm to prevent path-traversal CSP bypass (WebKit bug 308675)\n- CVE-2026-43660: preserve all CSP policies when a blob: URL inherits from a page\n  that sent multiple CSP headers (WebKit bug 308906)\n- CVE-2026-28958: pass the initiator when computing SameSite info in\n  FrameLoader::load to prevent SameSite=Strict cookie cross-site leakage (WebKit bug 311228)","status":"published","published":"2026-06-23T12:14:16Z","modified":"2026-10-26T09:43:20.056872229Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782217586","title":"webkit2gtk3: Fix of 17 CVEs","description":"- Rebase to webkitgtk 2.52.4 to address WebKitGTK security advisory\n  WSA-2026-0003 (16 CVEs).\n- Refresh libsoup2.patch for 2.52.4 library version triplet bumps\n  (WEBKIT 21/8/21, JAVASCRIPTCORE 10/12/10 on API 4.1;\n  WEBKIT 20/8/16, JAVASCRIPTCORE 8/12/7 on API 6.0).\n- Drop aarch64-build.patch — the upstream cherry-pick (Apple fix for\n  WebKit bug 306638) is included in 2.52.4.\n- Add fix-system-malloc-llint-extractor.patch (upstream cherry-pick\n  314364@main, bugs.webkit.org/show_bug.cgi?id=316083) to gate\n  bmalloc_CopyHeaders in LLIntSettingsExtractor/LLIntOffsetsExtractor\n  dependencies on (NOT USE_SYSTEM_MALLOC). Without it, CMake configure\n  fails on aarch64 because USE_64KB_PAGE_BLOCK=ON forces\n  USE_SYSTEM_MALLOC=ON, which prevents the bmalloc subdirectory from\n  being added and the bmalloc_CopyHeaders target from being created.\n- CVEs resolved by this rebase (WSA-2026-0003):\n  CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902,\n  CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907,\n  CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953,\n  CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660","status":"published","published":"2026-07-20T09:05:48Z","modified":"2026-10-26T09:30:22.280890172Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"openSUSE-SU-2026:21129-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:17:07Z","modified":"2026-06-30T18:24:44.059491718Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22203-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:32:16Z","modified":"2026-06-24T09:00:08.068759511Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22212-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:32:16Z","modified":"2026-06-24T09:00:11.84636551Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2376-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n \nUpdate to version 2.52.4:\n\nSecurity fixes:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nOther fixes:\n\n- Add patch to fix a crash on evolution (bsc#1264745).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-11T16:07:25Z","modified":"2026-06-12T08:45:07.127570023Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2378-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-11T16:10:23Z","modified":"2026-06-12T08:45:07.094928571Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2623-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903,, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-24T12:45:43Z","modified":"2026-06-25T06:15:06.971817007Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-8703-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","status":"published","published":"2026-08-31T12:46:51Z","modified":"2026-08-31T22:26:22.372464162Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}