MiracleLinux 4 : webkitgtk-1.2.6-2.AXS4 (AXSA:2011-34:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2011-34:01 advisory. WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. Security issues fixed with this release: CVE-2010-1780...

Why iPhone users should update and restart their devices now

If you were still questioning whether iOS 26+ is for you, now is the time to make that call. Why? On December 12, 2025, Apple patched two WebKit zero‑day vulnerabilities linked to mercenary spyware and is now effectively pushing iPhone 11 and newer users toward iOS 26+, because that’s where the...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174...

MiracleLinux 9 : webkit2gtk3-2.50.3-1.el9_7 (AXSA:2025-11554:21)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11554:21 advisory. webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS CVE-2025-13502 webkitgtk: Processing...

MiracleLinux 8 : webkit2gtk3-2.50.3-1.el8_10.ML.1 (AXSA:2025-11507:20)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11507:20 advisory. webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS CVE-2025-13502 webkitgtk: Processing...

[SECURITY] Fedora 42 Update: chromium-143.0.7499.192-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2011-0244

WebKit in Apple Safari before 5.0.6 allows user-assisted remote attackers to read arbitrary files via vectors related to improper canonicalization of URLs within RSS feeds...

Exploit for Use After Free in Apple Safari

CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208...

SUSE-SU-2026:0021-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208....

[SECURITY] Fedora 42 Update: webkitgtk-2.50.4-1.fc42

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

The vulnerability of the web page rendering module in Safari browsers for WebKit operating systems—tvOS, iOS, iPadOS, watchOS, macOS, and visionOS—allows attackers to execute arbitrary code and gain full control over the device.

The vulnerability of the Web page rendering module in Safari browsers of the WebKit framework in operating systems such as tvOS, iOS, iPadOS, watchOS, macOS, and visionOS relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2025-15228

BPMFlowWebkit by WELLTEND TECHNOLOGY is affected by an Arbitrary File Upload vulnerability that enables unauthenticated remote attackers to upload and execute a Web Shell backdoor, leading to arbitrary code execution on the server. Affected component is BPMFlowWebkit; root cause is an arbitrary f...

0day-GigaCage-Webkit

WebKit Gigacage iOS 26.2 Advisory ID: CVE Pending...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page

A flaw was found in ANGLE in Google Chrome. This vulnerability allows a remote attacker to perform out of bounds memory access via a crafted HTML HyperText Markup Language page. Although this was reported on Google Chrome, this issue also affected the WebKitGTK package with the same possible...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper memory handling and result in an unexpected process crash...