CVE-2025-66286: Authorization Bypass Through User-Controlled Key

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2025-66286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications...

PT-2026-34659

Name of the Vulnerable Software and Affected Versions WebKitGTK affected versions not specified WPE WebKit affected versions not specified Description An API design flaw allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. While applications typical...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

[SECURITY] Fedora 42 Update: cef-146.0.11^chromium146.0.7680.177-2.fc42

CEF is an embeddable build of Chromium, powered by WebKit Blink...

[SECURITY] Fedora 43 Update: cef-146.0.11^chromium146.0.7680.177-2.fc43

CEF is an embeddable build of Chromium, powered by WebKit Blink...

ps459

Multi-Firmware PS4 WebKit & Kernel Exploit Chain An exploit c...

coruna-exploit-kit-analysis

Coruna iOS Exploit Kit — Reverse Engineering Analysis Def...

[SECURITY] Fedora 42 Update: webkitgtk-2.52.1-1.fc42

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

[SECURITY] Fedora 43 Update: webkitgtk-2.52.1-1.fc43

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

[SECURITY] Fedora 42 Update: cef-146.0.9^chromium146.0.7680.164-1.fc42

CEF is an embeddable build of Chromium, powered by WebKit Blink...

[SECURITY] Fedora 43 Update: cef-146.0.9^chromium146.0.7680.164-1.fc43

CEF is an embeddable build of Chromium, powered by WebKit Blink...

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, and visionOS allows a hacker to trigger a service failure.

The vulnerability of the WebKit component in the Safari browser on macOS, iOS, iPadOS, and VisionOS operating systems is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the WebKit component in the Safari browser for operating systems macOS, iOS, iPadOS, and visionOS allows attackers to circumvent security restrictions.

The vulnerability of the WebKit component in the Safari browser for operating systems macOS, iOS, iPadOS, and visionOS is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

Apple expands “DarkSword” patches to iOS 18.7.7

Apple widened its latest iOS 18 security update to cover far more iPhones and iPads, specifically to stop real‑world DarkSword attacks that can compromise a device from a single website visit. After researchers published their findings about the DarkSword attacks and an exploit kit abusing the...

[SECURITY] Fedora 44 Update: webkitgtk-2.52.1-1.fc44

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

kexploitbinary

DarkSword Red Team Framework Framework Python com CLI para en...

SUSE-SU-2026:1139-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption bsc1259950. - CVE-2025-31223: processing maliciously crafted web content may lead to memory corruption bsc1259949. -...