Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

WebKitGTK 3 can let attackers take control of your system

published 2 months ago

Summary

The WebKitGTK 3 library used by many web‑based applications on Red Hat Linux has a security weakness that could allow a malicious website or content to execute code on the server or workstation. This could lead to unauthorized access or data loss. Install the latest Red Hat security update for WebKitGTK 3 as soon as possible to close the gap.

What to do

Update redhat webkit2gtk3 to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-debuginfo to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-debugsource to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-devel to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-devel-debuginfo to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-jsc to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-jsc-debuginfo to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-jsc-devel to version 0:2.52.5-1.el8_4.
Update redhat webkit2gtk3-jsc-devel-debuginfo to version 0:2.52.5-1.el8_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-debugsource	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-devel	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-devel-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-jsc	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-jsc-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-jsc-devel	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	webkit2gtk3-jsc-devel-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-debugsource	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-devel	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-devel-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-jsc	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-jsc-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-jsc-devel	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	webkit2gtk3-jsc-devel-debuginfo	< 0:2.52.5-1.el8_4 Fix: upgrade to 0:2.52.5-1.el8_4

Original advisory text

Red Hat Security Advisory: webkit2gtk3 security update

References

https://access.redhat.com/errata/RHSA-2026:57348 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2280382 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500519 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500520 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500521 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500522 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500523 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500524 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500525 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500526 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500527 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500528 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500529 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500530 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500531 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500532 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500533 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500534 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500535 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500536 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500537 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500538 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500539 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500540 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57348.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-4367 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-4367 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-4367 Vendor Advisory
https://webkitgtk.org/security/WSA-2026-0004.html Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/#CVE-2024-4367 Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/#CVE-2024-4367 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-39872 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-39872 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-39872 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313528 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43663 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43663 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43663 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=312781 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43676 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43676 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43676 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=317231 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43699 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43699 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43699 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=317227 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43701 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43701 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43701 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=315004 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43705 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43705 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43705 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=314528 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43707 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43707 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43707 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=315951 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43712 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43712 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43712 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=314235 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43713 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43713 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43713 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=314806 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43715 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43715 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43715 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313577 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43716 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43716 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43716 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313473 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43720 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43720 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43720 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313175 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43721 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43721 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43721 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313478 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43725 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43725 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43725 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=312832 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43726 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43726 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43726 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313857 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43727 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43727 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43727 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313691 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43731 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43731 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43731 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=314115 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43732 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43732 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43732 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313085 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43734 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43734 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43734 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=313693 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43740 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43740 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43740 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=308046 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43742 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43742 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43742 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=315161 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-43745 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-43745 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43745 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=315365 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-64787 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2520320 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-64787 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-64787 Vendor Advisory
https://webkitgtk.org/security/WSA-2026-0005.html Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published20 Aug 2026

Updated22 Aug 2026

First seen22 Aug 2026

Sources

RHSA-2026:57348 · OSV

Track software like this

Free during beta