{"id":"CVE-2026-43660","aliases":["ALSA-2026:25918","ALSA-2026:25927","BELL-CVE-2026-43660","CLSA-2026-1782216821","CLSA-2026-1782217586","DEBIAN-CVE-2026-43660","EUVD-2026-29305","GHSA-xcxj-2mhj-x95h","RHSA-2026:25918","RHSA-2026:25927","RHSA-2026:27728","RHSA-2026:27785","RHSA-2026:27804","RHSA-2026:28114","RHSA-2026:28146","RHSA-2026:28147","RHSA-2026:28148","RLSA-2026:25918","RLSA-2026:25927","ROOT-OS-DEBIAN-12-CVE-2026-43660","SUSE-SU-2026:22203-1","SUSE-SU-2026:22212-1","SUSE-SU-2026:2376-1","SUSE-SU-2026:2378-1","SUSE-SU-2026:24225-1","SUSE-SU-2026:2623-1","UBUNTU-CVE-2026-43660","USN-8703-1","openSUSE-SU-2026:21129-1","openSUSE-SU-2026:22076-1"],"status":"published","title":"A validation issue was addressed with improved logic. This issue is fixed in iOS 18.7.9 and...","description":"A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0027,"percentile":0.19411,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-693"],"published":"2026-05-11T20:07:54Z","modified":"2026-10-31T07:15:03Z","fixes":[{"ecosystem":"Alpaquita:23","package":"openjdk11","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk27","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk27","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk27","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.52.5-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.52.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.52.4-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"webkit2gtk","fixed_in":["2.50.6-1~deb12u2.aikido.1","2.50.6-1~deb12u2.aikido.2","2.50.6-1~deb12u2.aikido.3","2.50.6-1~deb12u2.aikido.4","2.50.6-1~deb12u2.aikido.5","2.50.6-1~deb12u2.aikido.6","2.50.6-1~deb12u2.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-webkit2gtk","fixed_in":["2.50.6-1~deb12u2.aikido.1","2.50.6-1~deb12u2.aikido.2","2.50.6-1~deb12u2.aikido.3","2.50.6-1~deb12u2.aikido.4","2.50.6-1~deb12u2.aikido.5","2.50.6-1~deb12u2.aikido.6","2.50.6-1~deb12u2.aikido.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","fixed_in":["2.52.6-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","fixed_in":["2.52.6-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.29_p11-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.472_p10-r0"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.29_p11-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.472_p10-r0"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1.el9_6.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1.el9.tuxcare.els9"}]}],"bundled":16},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1","2.52.4-1","2.52.5-1","2.52.5-1~deb13u1","2.52.6-1","2.52.6-1~deb13u1","2.53.1-1","2.53.2-1","2.53.3-1","2.53.4-1","2.53.90-1","2.53.91-1","2.53.92-1","2.54.0-1","2.54.0-1~deb13u1","2.54.0-1~deb13u2","2.54.0-1~deb13u3","2.54.0-1~exp1","2.54.1-1","2.54.2-1","2.54.2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.5-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1","2.52.4-1"]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1","2.50.3-1","2.50.3-1+hurd.1","2.50.3-1~deb11u1","2.50.3-1~deb12u1","2.50.3-1~deb13u1","2.50.4-1","2.50.4-1~deb11u1","2.50.4-1~deb12u1","2.50.4-1~deb13u1","2.50.5-1","2.50.6-1","2.50.6-1~deb11u1","2.50.6-1~deb12u1","2.50.6-1~deb12u2","2.50.6-1~deb13u1","2.51.1-1","2.51.2-1","2.51.3-1","2.51.4-1","2.51.90-1","2.51.91-1","2.51.92-1","2.51.93-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.3-2","2.52.3-2~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el7_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_6"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_2"}]}],"bundled":17},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el8_10"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.52.4-1.el9_8"}]}],"bundled":16},{"source":"osv","ecosystem":"Root:Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1~deb12u2.aikido.1"},{"fixed":"2.50.6-1~deb12u2.aikido.2"},{"fixed":"2.50.6-1~deb12u2.aikido.3"},{"fixed":"2.50.6-1~deb12u2.aikido.4"},{"fixed":"2.50.6-1~deb12u2.aikido.5"},{"fixed":"2.50.6-1~deb12u2.aikido.6"},{"fixed":"2.50.6-1~deb12u2.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.6-1~deb12u2.aikido.1"},{"fixed":"2.50.6-1~deb12u2.aikido.2"},{"fixed":"2.50.6-1~deb12u2.aikido.3"},{"fixed":"2.50.6-1~deb12u2.aikido.4"},{"fixed":"2.50.6-1~deb12u2.aikido.5"},{"fixed":"2.50.6-1~deb12u2.aikido.6"},{"fixed":"2.50.6-1~deb12u2.aikido.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150600.12.68.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-150400.4.143.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-4.60.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-4.60.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1","2.48.5-0ubuntu0.22.04.1","2.48.7-0ubuntu0.22.04.2","2.50.1-0ubuntu0.22.04.1","2.50.2-0ubuntu0.22.04.2","2.50.3-0ubuntu0.22.04.1","2.50.4-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1","2.50.2-0ubuntu0.24.04.2","2.50.3-0ubuntu0.24.04.1","2.50.4-0ubuntu0.24.04.1","2.52.3-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.26.04.1"}]}],"versions":["2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.1-1ubuntu1","2.50.2-1ubuntu1","2.50.3-1ubuntu1","2.50.4-1ubuntu1","2.51.91-1","2.51.92-1","2.52.0-1","2.52.3-0ubuntu0.26.04.2","2.52.3-0ubuntu0.26.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.24.04.1"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1","2.50.2-0ubuntu0.24.04.2","2.50.3-0ubuntu0.24.04.1","2.50.4-0ubuntu0.24.04.1","2.52.3-0ubuntu0.24.04.1"],"bundled":47},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.6-0ubuntu0.26.04.1"}]}],"versions":["2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.1-1ubuntu1","2.50.2-1ubuntu1","2.50.3-1ubuntu1","2.50.4-1ubuntu1","2.51.91-1","2.51.92-1","2.52.0-1","2.52.3-0ubuntu0.26.04.2","2.52.3-0ubuntu0.26.04.3"],"bundled":47},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.4-160000.1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-160000.1.1"}]}],"bundled":243}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"visionos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/127110","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127111","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127115","tags":["Release Notes","Vendor Advisory","article"]},{"url":"https://support.apple.com/en-us/127118","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127119","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127120","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/127121"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43660","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xcxj-2mhj-x95h"},{"url":"https://access.redhat.com/errata/RHSA-2026:25918","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28847","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28883","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28901","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28902","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28903","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28904","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28905","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28907","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28942","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28946","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28947","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28953","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28955","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28958","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43658","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43660","tags":["report"]},{"url":"https://bugzilla.redhat.com/2471790","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483956","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483957","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483958","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483959","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483960","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483961","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483963","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483964","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483965","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483966","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483967","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483968","tags":["report"]},{"url":"https://bugzilla.redhat.com/2483969","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-25918.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-28984.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25927","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-25927.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-43660","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782216821.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28958","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43658","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782217586.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43214","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-43660","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2471790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483969","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25918.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28847","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0003.html","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28883","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28901","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28902","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28903","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28904","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28905","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28907","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28942","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28946","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28947","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28953","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28955","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28958","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28984","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0005.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43658","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43660","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25927.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27728","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27728.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27785","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27785.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27804","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27804.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28114","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28114.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28146","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28146.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28147","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28147.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28148","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28148.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25918","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25927","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622203-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267506","tags":["report"]},{"url":"https://bugzilla.suse.com/1267507","tags":["report"]},{"url":"https://bugzilla.suse.com/1267508","tags":["report"]},{"url":"https://bugzilla.suse.com/1267509","tags":["report"]},{"url":"https://bugzilla.suse.com/1267510","tags":["report"]},{"url":"https://bugzilla.suse.com/1267511","tags":["report"]},{"url":"https://bugzilla.suse.com/1267512","tags":["report"]},{"url":"https://bugzilla.suse.com/1267513","tags":["report"]},{"url":"https://bugzilla.suse.com/1267514","tags":["report"]},{"url":"https://bugzilla.suse.com/1267515","tags":["report"]},{"url":"https://bugzilla.suse.com/1267516","tags":["report"]},{"url":"https://bugzilla.suse.com/1267517","tags":["report"]},{"url":"https://bugzilla.suse.com/1267518","tags":["report"]},{"url":"https://bugzilla.suse.com/1267519","tags":["report"]},{"url":"https://bugzilla.suse.com/1267520","tags":["report"]},{"url":"https://bugzilla.suse.com/1267521","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43660","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622212-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262376-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264745","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262378-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624225-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1275791","tags":["report"]},{"url":"https://bugzilla.suse.com/1277005","tags":["report"]},{"url":"https://bugzilla.suse.com/1277006","tags":["report"]},{"url":"https://bugzilla.suse.com/1277007","tags":["report"]},{"url":"https://bugzilla.suse.com/1277009","tags":["report"]},{"url":"https://bugzilla.suse.com/1277010","tags":["report"]},{"url":"https://bugzilla.suse.com/1277011","tags":["report"]},{"url":"https://bugzilla.suse.com/1277012","tags":["report"]},{"url":"https://bugzilla.suse.com/1277013","tags":["report"]},{"url":"https://bugzilla.suse.com/1277014","tags":["report"]},{"url":"https://bugzilla.suse.com/1277016","tags":["report"]},{"url":"https://bugzilla.suse.com/1277017","tags":["report"]},{"url":"https://bugzilla.suse.com/1277018","tags":["report"]},{"url":"https://bugzilla.suse.com/1281116","tags":["report"]},{"url":"https://bugzilla.suse.com/1284619","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-65351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9998","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262623-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-43660","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8703-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-28847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-39872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64787","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-43660","description":"A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","status":"published","published":"2026-05-11T20:07:54.438Z","modified":"2026-05-13T19:58:49.368Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T13:37:25.103021Z"}],"euvd":[{"id":"EUVD-2026-29305","description":"A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","status":"published","published":"2026-05-11T20:07:54Z","modified":"2026-05-13T19:58:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:04:32.516693Z"}],"ghsa":[{"id":"GHSA-xcxj-2mhj-x95h","title":"A validation issue was addressed with improved logic. This issue is fixed in iOS 18.7.9 and...","description":"A validation issue was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","status":"published","published":"2026-05-11T21:31:40Z","modified":"2026-05-13T21:33:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T15:08:08.28199Z"}],"nvd":[{"id":"CVE-2026-43660","description":"A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","status":"published","published":"2026-05-11T21:19:01.72Z","modified":"2026-10-26T18:10:00.173Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:12:18.239974Z"}],"osv":[{"id":"BELL-CVE-2026-43660","status":"published","published":"2026-06-03T06:10:53.539117Z","modified":"2026-10-31T07:15:03.188962384Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:24.12174Z"},{"id":"DEBIAN-CVE-2026-43660","description":"A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","status":"published","published":"2026-05-11T21:19:01.72Z","modified":"2026-10-27T10:01:30.69090355Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:55.669088Z"},{"id":"RHSA-2026:25918","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-15T10:05:46Z","modified":"2026-10-01T10:08:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25927","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-16T10:06:24Z","modified":"2026-10-01T10:08:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27728","title":"Red Hat Security Advisory: webkitgtk4 security update","status":"published","published":"2026-06-22T10:06:43Z","modified":"2026-10-01T10:08:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27785","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-22T10:06:53Z","modified":"2026-10-01T10:08:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27804","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-23T10:08:09Z","modified":"2026-10-01T10:08:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28114","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-23T10:08:28Z","modified":"2026-10-01T10:08:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28146","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-24T10:08:24Z","modified":"2026-10-01T10:09:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28147","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-26T11:45:45Z","modified":"2026-10-01T10:09:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28148","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2026-06-24T10:08:25Z","modified":"2026-10-01T10:09:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:25918","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n\n* webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T06:00:26.379988Z","modified":"2026-06-17T06:30:05.797684685Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:25927","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n\n* webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-17T12:03:08.073041Z","modified":"2026-06-17T12:30:04.653210526Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-43660","description":"A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","status":"published","published":"2026-08-21T00:00:00Z","modified":"2026-09-02T19:32:47.114430064Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:56:22.075798Z"},{"id":"ALSA-2026:25918","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-15T00:00:00Z","modified":"2026-10-29T11:12:03.146249386Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:25927","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)\n  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)\n  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-15T00:00:00Z","modified":"2026-10-29T11:42:19.468012609Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"CLSA-2026-1782216821","title":"webkit2gtk3: Fix of 16 CVEs","description":"- CVE-2026-28907: align ContentSecurityPolicySource::pathMatches() with the CSP3\n  path-matching algorithm to prevent path-traversal CSP bypass (WebKit bug 308675)\n- CVE-2026-43660: preserve all CSP policies when a blob: URL inherits from a page\n  that sent multiple CSP headers (WebKit bug 308906)\n- CVE-2026-28958: pass the initiator when computing SameSite info in\n  FrameLoader::load to prevent SameSite=Strict cookie cross-site leakage (WebKit bug 311228)","status":"published","published":"2026-06-23T12:14:16Z","modified":"2026-10-26T09:43:20.056872229Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782217586","title":"webkit2gtk3: Fix of 17 CVEs","description":"- Rebase to webkitgtk 2.52.4 to address WebKitGTK security advisory\n  WSA-2026-0003 (16 CVEs).\n- Refresh libsoup2.patch for 2.52.4 library version triplet bumps\n  (WEBKIT 21/8/21, JAVASCRIPTCORE 10/12/10 on API 4.1;\n  WEBKIT 20/8/16, JAVASCRIPTCORE 8/12/7 on API 6.0).\n- Drop aarch64-build.patch — the upstream cherry-pick (Apple fix for\n  WebKit bug 306638) is included in 2.52.4.\n- Add fix-system-malloc-llint-extractor.patch (upstream cherry-pick\n  314364@main, bugs.webkit.org/show_bug.cgi?id=316083) to gate\n  bmalloc_CopyHeaders in LLIntSettingsExtractor/LLIntOffsetsExtractor\n  dependencies on (NOT USE_SYSTEM_MALLOC). Without it, CMake configure\n  fails on aarch64 because USE_64KB_PAGE_BLOCK=ON forces\n  USE_SYSTEM_MALLOC=ON, which prevents the bmalloc subdirectory from\n  being added and the bmalloc_CopyHeaders target from being created.\n- CVEs resolved by this rebase (WSA-2026-0003):\n  CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902,\n  CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907,\n  CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953,\n  CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660","status":"published","published":"2026-07-20T09:05:48Z","modified":"2026-10-26T09:30:22.280890172Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"openSUSE-SU-2026:21129-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:17:07Z","modified":"2026-06-30T18:24:44.059491718Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:22076-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791):\n- CVE-2026-28984: A memory handling issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-43804: A vulnerability that may lead to an app denial-of-service when visiting a website was addressed through improved state management.\n- CVE-2026-64713: A vulnerability that may allow websites to know if the user has visited a given link was addressed with improved checks.\n- CVE-2026-64719: An out-of-bounds access issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-64728: A permissions issue that may allow maliciously crafted web content to violate iframe sandboxing policy was addressed with improved validation.\n- CVE-2026-64730: A vulnerability that may lead to UI spoofing when visiting a website that frames malicious content was addressed with improved UI.\n- CVE-2026-64757: A memory corruption issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-64783: A use-after-free issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64787: A use-after-free issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved memory management.\n\nChanges for webkit2gtk3:\n\n- Update to version 2.54.1\n","status":"published","published":"2026-10-09T13:47:46Z","modified":"2026-10-19T17:23:12.640514058Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-43660","title":"CVE-2026-43660 in webkit2gtk - Patched by Root","description":"Root has patched CVE-2026-43660 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-07T18:20:06Z","modified":"2026-10-07T19:15:03.408078216Z","updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"SUSE-SU-2026:22203-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:32:16Z","modified":"2026-06-24T09:00:08.068759511Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22212-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges for webkit2gtk3:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Changes in version .52.3;\n + Add support for the \"scrollbar-color\" CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-20T09:32:16Z","modified":"2026-06-24T09:00:11.84636551Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2376-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n \nUpdate to version 2.52.4:\n\nSecurity fixes:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nOther fixes:\n\n- Add patch to fix a crash on evolution (bsc#1264745).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-11T16:07:25Z","modified":"2026-06-12T08:45:07.127570023Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2378-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Changes in version 2.52.2:\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-11T16:10:23Z","modified":"2026-06-12T08:45:07.094928571Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:24225-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791):\n- CVE-2026-28984: A memory handling issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-43804: A vulnerability that may lead to an app denial-of-service when visiting a website was addressed through improved state management.\n- CVE-2026-64713: A vulnerability that may allow websites to know if the user has visited a given link was addressed with improved checks.\n- CVE-2026-64719: An out-of-bounds access issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-64728: A permissions issue that may allow maliciously crafted web content to violate iframe sandboxing policy was addressed with improved validation.\n- CVE-2026-64730: A vulnerability that may lead to UI spoofing when visiting a website that frames malicious content was addressed with improved UI.\n- CVE-2026-64757: A memory corruption issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-64783: A use-after-free issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64787: A use-after-free issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved memory management.\n\nChanges for webkit2gtk3:\n\n- Update to version 2.54.1\n","status":"published","published":"2026-10-09T14:15:27Z","modified":"2026-10-21T17:23:11.047122438Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2623-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues\n\nUpdate to version 2.52.4:\n\n- CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code\n  execution due to a heap buffer overflow (bsc#1267506).\n- CVE-2026-28883: processing maliciously crafted web content may lead to an unexpected process crash due to a use-after-\n  free issue (bsc#1267507).\n- CVE-2026-28901: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267508).\n- CVE-2026-28902: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267509).\n- CVE-2026-28903: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267510).\n- CVE-2026-28904: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267511).\n- CVE-2026-28905: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267512).\n- CVE-2026-28907: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to improper input validation (bsc#1267513).\n- CVE-2026-28942: processing maliciously crafted web content may lead to an unexpected crash due to use-after-free\n  (bsc#1267514).\n- CVE-2026-28946: processing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267515).\n- CVE-2026-28947: rocessing maliciously crafted web content may lead to an unexpected crash due to a use-after-free\n  (bsc#1267516).\n- CVE-2026-28953: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267517).\n- CVE-2026-28955: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1267518).\n- CVE-2026-28958: an app may be able to access sensitive user data due to improper data protection (bsc#1267519).\n- CVE-2026-43658: processing maliciously crafted web content may lead to an unexpected crash due to improper memory\n  handling (bsc#1267520).\n- CVE-2026-43660: processing maliciously crafted web content may prevent Content Security Policy from being enforced due\n  to issues with logic (bsc#1267521).\n\nChanges:\n\n + Add support for half-width fonts.\n + Improve content filter compilation by avoiding file copies.\n + Improve handling of out of disk space conditions when the\n NetworkProcess tried to write data in caches.\n + Improve how the CMake build system checks whether libatomic is\n required.\n + Fix painting scrollbars when their width changes.\n + Fix playback of certain YouTube videos with low frame rates.\n + Fix webkit://gpu not working in systems where neither\n libGL.so.1 nor libOpenGL.so.0 are available.\n + Fix the build with librice 0.4 or newer when the GStreamer\n WebRTC backend is enabled at build configuration time.\n + Fix the build with USE_GSTREAMER_WEBRTC=OFF.\n + Fix the build with USE_GBM=OFF.\n + Fix several crashes and rendering issues.\n + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,\n CVE-2026-28902, CVE-2026-28903,, CVE-2026-28904,\n CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,\n CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,\n CVE-2026-43658, CVe-2026-43660.\n + Add support for the 'scrollbar-color' CSS property.\n + Fix some emoji glyphs being rendered as missing glyph boxes.\n + Fix JavaScriptCore crashes on architectures other than x86_64.\n + Fix the build on s390x.\n + Improve handling of real-time threads.\n + Fix scrollbar rendering glitches visible in some GPU\n configurations.\n + Fix V4L2 hardware accelerated media codecs now working due to\n overly restrictive sandbox device access rules.\n + Fix leak of bitmap images in\n webkit_favicon_database_get_favicon_finish().\n + Fix the build with USE_GTK4=OFF.\n","status":"published","published":"2026-06-24T12:45:43Z","modified":"2026-06-25T06:15:06.971817007Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-8703-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","status":"published","published":"2026-08-31T12:46:51Z","modified":"2026-08-31T22:26:22.372464162Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}