RHSA-2025:10364HighCVSS 10.0

Red Hat Security Advisory: webkitgtk4 security update

Published
July 7, 2025
Last Modified
July 31, 2026

🔗 CVE IDs covered (230)

CVE-2025-31205 →CVE-2022-46691 →CVE-2021-30665 →CVE-2023-32370 →CVE-2021-30689 →CVE-2021-30846 →CVE-2021-30984 →CVE-2022-22628 →CVE-2023-38599 →CVE-2023-42875 →CVE-2023-43010 →CVE-2024-27820 →CVE-2025-24158 →CVE-2021-30795 →CVE-2021-30952 →CVE-2021-30954 →CVE-2024-27851 →CVE-2024-44192 →CVE-2024-54505 →CVE-2024-54551 →CVE-2023-32373 →CVE-2020-9862 →CVE-2021-30682 →CVE-2021-30720 →CVE-2024-27808 →CVE-2022-22624 →CVE-2023-40414 →CVE-2025-24209 →CVE-2020-9894 →CVE-2021-30836 →CVE-2021-45483 →CVE-2022-32891 →CVE-2022-42826 →CVE-2022-46698 →CVE-2024-23284 →CVE-2025-24201 →CVE-2021-30887 →CVE-2022-26710 →CVE-2023-38133 →CVE-2023-38611 →CVE-2024-54479 →CVE-2025-31204 →CVE-2024-54658 →CVE-2020-9805 →CVE-2022-22677 →CVE-2024-27838 →CVE-2024-54467 →CVE-2020-9925 →CVE-2024-23222 →CVE-2024-54508 →CVE-2021-30661 →CVE-2021-30884 →CVE-2024-40779 →CVE-2021-30744 →CVE-2022-22594 →CVE-2023-32359 →CVE-2024-44309 →CVE-2025-24223 →CVE-2021-1844 →CVE-2022-22589 →CVE-2022-22620 →CVE-2021-30666 →CVE-2021-30809 →CVE-2022-22629 →CVE-2023-43000 →CVE-2024-27856 →CVE-2021-30734 →CVE-2020-9915 →CVE-2021-30818 →CVE-2022-46700 →CVE-2023-23518 →CVE-2023-38600 →CVE-2023-27932 →CVE-2023-38572 →CVE-2021-30749 →CVE-2021-30761 →CVE-2025-31206 →CVE-2020-9806 →CVE-2020-27918 →CVE-2022-30293 →CVE-2022-30294 · pendingCVE-2021-30897 →CVE-2024-23213 →CVE-2024-44308 →CVE-2020-9948 →CVE-2023-32393 →CVE-2023-42883 →CVE-2023-42950 →CVE-2025-24213 →CVE-2025-24216 →CVE-2022-32912 →CVE-2024-44187 →CVE-2024-54543 →CVE-2025-24208 →CVE-2021-1788 →CVE-2024-23280 →CVE-2025-24264 →CVE-2021-45481 →CVE-2022-22637 →CVE-2023-32439 →CVE-2023-42917 →CVE-2024-54502 →CVE-2021-1817 →CVE-2021-1870 →CVE-2022-32919 →CVE-2024-4558 →CVE-2024-27834 →CVE-2021-1820 →CVE-2014-1745 →CVE-2020-9952 →CVE-2023-42852 →CVE-2024-27833 →CVE-2021-30758 →CVE-2024-23252 · pendingCVE-2022-32888 →CVE-2020-9803 →CVE-2020-29623 →CVE-2022-32792 →CVE-2022-32886 →CVE-2021-1789 →CVE-2021-1871 →CVE-2021-21779 →CVE-2023-37450 →CVE-2024-54534 →CVE-2022-46705 →CVE-2023-39928 →CVE-2021-45482 →CVE-2022-26717 →CVE-2024-23254 →CVE-2024-44296 →CVE-2021-30799 →CVE-2023-42970 →CVE-2020-9895 →CVE-2022-26719 →CVE-2022-32923 →CVE-2023-28198 →CVE-2023-38594 →CVE-2024-40780 →CVE-2021-30951 →CVE-2021-1765 →CVE-2021-1826 →CVE-2021-30889 →CVE-2022-22592 →CVE-2023-25358 →CVE-2023-32435 →CVE-2023-41074 →CVE-2021-30797 →CVE-2020-9843 →CVE-2021-30934 →CVE-2022-46725 →CVE-2025-31257 →CVE-2023-23529 →CVE-2021-30849 →CVE-2022-48503 →CVE-2023-40397 →CVE-2020-9893 →CVE-2021-30762 →CVE-2022-42863 →CVE-2023-23517 →CVE-2023-38595 →CVE-2024-23271 →CVE-2025-24143 →CVE-2020-13543 →CVE-2022-46692 →CVE-2023-35074 →CVE-2023-38592 →CVE-2022-32933 →CVE-2020-13584 →CVE-2021-1799 →CVE-2022-46699 →CVE-2022-26716 →CVE-2022-26700 →CVE-2020-13753 →CVE-2021-30823 →CVE-2022-22662 →CVE-2023-41983 →CVE-2022-0108 →CVE-2023-28205 →CVE-2022-32893 →CVE-2023-40451 →CVE-2021-30663 →CVE-2021-30890 →CVE-2022-42799 →CVE-2024-40866 →CVE-2025-30427 →CVE-2021-1825 →CVE-2021-21806 →CVE-2023-42916 →CVE-2024-23263 →CVE-2024-40789 →CVE-2020-9947 →CVE-2021-30936 →CVE-2020-9807 →CVE-2022-42824 →CVE-2022-32885 →CVE-2022-42852 →CVE-2023-42956 →CVE-2025-24162 →CVE-2020-9850 →CVE-2021-21775 →CVE-2024-44185 →CVE-2025-43480 →CVE-2022-26709 →CVE-2025-31215 →CVE-2020-9983 →CVE-2023-28204 →CVE-2025-24150 →CVE-2021-30851 →CVE-2021-30888 →CVE-2023-42890 →CVE-2022-22590 →CVE-2022-32816 →CVE-2020-9951 →CVE-2020-13558 →CVE-2021-1801 →CVE-2022-42856 →CVE-2023-42833 →CVE-2020-9802 →CVE-2021-42762 →CVE-2022-42823 →CVE-2022-42867 →CVE-2023-38597 →CVE-2023-41993 →CVE-2023-42843 →CVE-2024-40776 →CVE-2024-40782 →CVE-2024-44244 →CVE-2021-30848 →CVE-2021-30953 →CVE-2023-27954 →

📋 Description

CVE-2014-1745 — webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents CVE-2020-9802 — webkitgtk: Logic issue may lead to arbitrary code execution CVE-2020-9803 — webkitgtk: Memory corruption may lead to arbitrary code execution CVE-2020-9805 — webkitgtk: Logic issue may lead to cross site scripting CVE-2020-9806 — webkitgtk: Memory corruption may lead to arbitrary code execution CVE-2020-9807 — webkitgtk: Memory corruption may lead to arbitrary code execution CVE-2020-9843 — webkitgtk: Input validation issue may lead to cross site scripting CVE-2020-9850 — webkitgtk: Logic issue may lead to arbitrary code execution CVE-2020-9862 — webkitgtk: Command injection in web inspector CVE-2020-9893 — webkitgtk: Use-after-free may lead to application termination or arbitrary code execution CVE-2020-9894 — webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution CVE-2020-9895 — webkitgtk: Use-after-free may lead to application termination or arbitrary code execution CVE-2020-9915 — webkitgtk: Access issue in content security policy CVE-2020-9925 — webkitgtk: A logic issue may lead to cross site scripting CVE-2020-9947 — webkitgtk: use after free issue may lead to arbitrary code execution CVE-2020-9948 — webkitgtk: type confusion may lead to arbitrary code execution CVE-2020-9951 — webkitgtk: use-after-free may lead to arbitrary code execution CVE-2020-9952 — webkitgtk: input validation issue may lead to a cross site scripting CVE-2020-9983 — webkitgtk: out-of-bounds write may lead to code execution CVE-2020-13543 — webkitgtk: use-after-free may lead to arbitrary code execution CVE-2020-13558 — webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution CVE-2020-13584 — webkitgtk: use-after-free may lead to arbitrary code execution CVE-2020-13753 — webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl CVE-2020-27918 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2020-29623 — webkitgtk: User may be unable to fully delete browsing history CVE-2021-1765 — webkitgtk: IFrame sandboxing policy violation CVE-2021-1788 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-1789 — webkitgtk: Type confusion issue leading to arbitrary code execution CVE-2021-1799 — webkitgtk: Access to restricted ports on arbitrary servers via port redirection CVE-2021-1801 — webkitgtk: IFrame sandboxing policy violation CVE-2021-1817 — webkitgtk: Memory corruption leading to arbitrary code execution CVE-2021-1820 — webkitgtk: Memory initialization issue possibly leading to memory disclosure CVE-2021-1825 — webkitgtk: Input validation issue leading to cross site scripting attack CVE-2021-1826 — webkitgtk: Logic issue leading to universal cross site scripting attack CVE-2021-1844 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2021-1870 — webkitgtk: Logic issue leading to arbitrary code execution CVE-2021-1871 — webkitgtk: Logic issue leading to arbitrary code execution CVE-2021-21775 — webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution CVE-2021-21779 — webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution CVE-2021-21806 — webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution CVE-2021-30661 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-30663 — webkitgtk: Integer overflow leading to arbitrary code execution CVE-2021-30665 — webkitgtk: Memory corruption leading to arbitrary code execution CVE-2021-30666 — webkitgtk: Buffer overflow leading to arbitrary code execution CVE-2021-30682 — webkitgtk: Logic issue leading to leak of sensitive user information CVE-2021-30689 — webkitgtk: Logic issue leading to universal cross site scripting attack CVE-2021-30720 — webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers CVE-2021-30734 — webkitgtk: Memory corruptions leading to arbitrary code execution CVE-2021-30744 — webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack CVE-2021-30749 — webkitgtk: Memory corruptions leading to arbitrary code execution CVE-2021-30758 — webkitgtk: Type confusion leading to arbitrary code execution CVE-2021-30761 — webkitgtk: Memory corruption leading to arbitrary code execution CVE-2021-30762 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-30795 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-30797 — webkitgtk: Insufficient checks leading to arbitrary code execution CVE-2021-30799 — webkitgtk: Memory corruptions leading to arbitrary code execution CVE-2021-30809 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-30818 — webkitgtk: Type confusion issue leading to arbitrary code execution CVE-2021-30823 — webkitgtk: Logic issue leading to HSTS bypass CVE-2021-30836 — webkitgtk: Out-of-bounds read leading to memory disclosure CVE-2021-30846 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2021-30848 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2021-30849 — webkitgtk: Multiple memory corruption issue leading to arbitrary code execution CVE-2021-30851 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2021-30884 — webkitgtk: CSS compositing issue leading to revealing of the browsing history CVE-2021-30887 — webkitgtk: Logic issue leading to Content Security Policy bypass CVE-2021-30888 — webkitgtk: Information leak via Content Security Policy reports CVE-2021-30889 — webkitgtk: Buffer overflow leading to arbitrary code execution CVE-2021-30890 — webkitgtk: Logic issue leading to universal cross-site scripting CVE-2021-30897 — webkitgtk: Cross-origin data exfiltration via resource timing API CVE-2021-30934 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30936 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30951 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30952 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30953 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30954 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30984 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-42762 — webkitgtk: limited sandbox escape via VFS syscalls CVE-2021-45481 — webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create CVE-2021-45482 — webkitgtk: use-after-free in WebCore::ContainerNode::firstChild CVE-2021-45483 — webkitgtk: use-after-free in WebCore::Frame::page CVE-2022-0108 — chromium-browser: Inappropriate implementation in Navigation CVE-2022-22589 — webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript CVE-2022-22590 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2022-22592 — webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced CVE-2022-22594 — webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2022-22620 — webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free CVE-2022-22624 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-22628 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-22629 — webkitgtk: Buffer overflow leading to arbitrary code execution CVE-2022-22637 — webkitgtk: logic issue was addressed with improved state management CVE-2022-22662 — webkitgtk: Cookie management issue leading to sensitive user information disclosure CVE-2022-22677 — webkitgtk: the video in a webRTC call may be interrupted if the audio capture gets interrupted CVE-2022-26700 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2022-26709 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-26710 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-26716 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2022-26717 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-26719 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2022-30293 — webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution CVE-2022-30294 — webkitgtk: heap-buffer-overflow in WebCore::TextureMapperLayer::setContentsLayer CVE-2022-32792 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2022-32816 — webkitgtk: malicious content may lead to UI spoofing CVE-2022-32885 — webkitgtk: Memory corruption issue when processing web content CVE-2022-32886 — webkitgtk: buffer overflow issue was addressed with improved memory handling CVE-2022-32888 — webkitgtk: out-of-bounds write issue was addressed with improved bounds checking CVE-2022-32891 — webkitgtk: UI spoofing while Visiting a website that frames malicious content CVE-2022-32893 — webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution CVE-2022-32912 — webkitgtk: out-of-bounds read was addressed with improved bounds checking CVE-2022-32919 — webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing. CVE-2022-32923 — webkitgtk: correctness issue in the JIT was addressed with improved checks CVE-2022-32933 — webkitgtk: A website may able to track visited websites in private browsing CVE-2022-42799 — webkitgtk: issue was addressed with improved UI handling CVE-2022-42823 — webkitgtk: type confusion issue leading to arbitrary code execution CVE-2022-42824 — webkitgtk: sensitive information disclosure issue CVE-2022-42826 — webkitgtk: use-after-free issue leading to arbitrary code execution CVE-2022-42852 — webkitgtk: memory disclosure issue was addressed with improved memory handling CVE-2022-42856 — webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution CVE-2022-42863 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2022-42867 — webkitgtk: use-after-free issue leading to arbitrary code execution CVE-2022-46691 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2022-46692 — webkitgtk: Same Origin Policy bypass issue CVE-2022-46698 — webkitgtk: logic issue leading to user information disclosure CVE-2022-46699 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2022-46700 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2022-46705 — webkitgtk: Visiting a malicious website may lead to address bar spoofing CVE-2022-46725 — webkitgtk: Visiting a malicious website may lead to address bar spoofing. CVE-2022-48503 — webkitgtk: improper bounds checking leading to arbitrary code execution CVE-2023-23517 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-23518 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-23529 — webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution CVE-2023-25358 — webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() CVE-2023-27932 — webkitgtk: Same Origin Policy bypass via crafted web content CVE-2023-27954 — webkitgtk: Website may be able to track sensitive user information CVE-2023-28198 — webkitgtk: use after free vulnerability CVE-2023-28204 — webkitgtk: an out-of-bounds read when processing malicious content CVE-2023-28205 — WebKitGTK: use-after-free leads to arbitrary code execution CVE-2023-32359 — webkitgtk: User password may be read aloud by a text-to-speech accessibility feature CVE-2023-32370 — webkitgtk: content security policy blacklist failure CVE-2023-32373 — webkitgtk: a use-after-free when processing maliciously crafted web content CVE-2023-32393 — webkitgtk: arbitrary code execution CVE-2023-32435 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-32439 — webkitgtk: type confusion issue leading to arbitrary code execution CVE-2023-35074 — webkitgtk: processing web content may lead to arbitrary code execution CVE-2023-37450 — webkitgtk: arbitrary code execution CVE-2023-38133 — webkitgtk: disclose sensitive information CVE-2023-38572 — webkitgtk: bypass Same Origin Policy CVE-2023-38592 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-38594 — webkitgtk: arbitrary code execution CVE-2023-38595 — webkitgtk: arbitrary code execution CVE-2023-38597 — webkitgtk: arbitrary code execution CVE-2023-38599 — webkitgtk: track sensitive user information CVE-2023-38600 — webkitgtk: arbitrary code execution CVE-2023-38611 — webkitgtk: arbitrary code execution CVE-2023-39928 — webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports CVE-2023-40397 — webkitgtk: arbitrary javascript code execution CVE-2023-40414 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-40451 — webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code CVE-2023-41074 — webkitgtk: processing web content may lead to arbitrary code execution CVE-2023-41983 — webkitgtk: Processing web content may lead to a denial of service CVE-2023-41993 — webkitgtk: processing malicious web content may lead to arbitrary code execution CVE-2023-42833 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-42843 — webkit: visiting a malicious website may lead to address bar spoofing CVE-2023-42852 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-42875 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-42883 — webkitgtk: processing a malicious image may lead to a denial of service CVE-2023-42890 — webkitgtk: processing malicious web content may lead to arbitrary code execution CVE-2023-42916 — webkitgtk: Out-of-bounds read leads to sensitive data leak CVE-2023-42917 — webkitgtk: Arbitrary Remote Code Execution CVE-2023-42950 — webkit: heap use-after-free may lead to arbitrary code execution CVE-2023-42956 — webkit: processing malicious web content may lead to a denial of service CVE-2023-42970 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-43000 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2023-43010 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2024-4558 — chromium-browser: Use after free in ANGLE CVE-2024-23213 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2024-23222 — webkitgtk: type confusion may lead to arbitrary code execution CVE-2024-23252 — webkit: processing malicious web content may lead to denial-of-service CVE-2024-23254 — webkit: malicious website may exfiltrate audio data cross-origin CVE-2024-23263 — webkit: processing malicious web content prevents Content Security Policy from being enforced CVE-2024-23271 — webkitgtk: A malicious website may cause unexpected cross-origin behavior CVE-2024-23280 — webkit: maliciously crafted webpage may be able to fingerprint the user CVE-2024-23284 — webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced CVE-2024-27808 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2024-27820 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2024-27833 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2024-27834 — webkit: pointer authentication bypass CVE-2024-27838 — webkitgtk: A maliciously crafted webpage may be able to fingerprint the user CVE-2024-27851 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2024-27856 — webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution CVE-2024-40776 — webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40779 — webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking CVE-2024-40780 — webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking CVE-2024-40782 — webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management CVE-2024-40789 — webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-40866 — webkitgtk: Visiting a malicious website may lead to address bar spoofing CVE-2024-44185 — webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44187 — webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2024-44192 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44244 — webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44296 — webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced CVE-2024-44308 — webkitgtk: javascriptcore: processing maliciously crafted web content may lead to arbitrary code execution CVE-2024-44309 — webkitgtk: data isolation bypass vulnerability CVE-2024-54467 — webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2024-54479 — WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-54502 — webkit: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-54505 — webkit: Processing maliciously crafted web content may lead to memory corruption CVE-2024-54508 — webkit: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-54534 — webkit: Processing maliciously crafted web content may lead to memory corruption CVE-2024-54543 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2024-54551 — webkitgtk: Processing web content may lead to a denial-of-service CVE-2024-54658 — webkitgtk: Processing web content may lead to a denial-of-service CVE-2025-24143 — webkitgtk: A maliciously crafted webpage may be able to fingerprint the user CVE-2025-24150 — webkitgtk: Copying a URL from Web Inspector may lead to command injection CVE-2025-24158 — webkitgtk: Processing web content may lead to a denial-of-service CVE-2025-24162 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2025-24201 — webkitgtk: out-of-bounds write vulnerability CVE-2025-24208 — webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack CVE-2025-24209 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2025-24213 — webkitgtk: A type confusion issue could lead to memory corruption CVE-2025-24216 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-24223 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2025-24264 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-30427 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-31204 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2025-31205 — webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2025-31206 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-31215 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2025-31257 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43480 — webkitgtk: A malicious website may exfiltrate data cross-origin

🎯 Affected products15

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • webkitgtk4-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-0:2.48.3-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-0:2.48.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-debuginfo-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-debuginfo-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • webkitgtk4-debuginfo-0:2.48.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-devel-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • webkitgtk4-devel-0:2.48.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-doc-0:2.48.3-2.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • webkitgtk4-jsc-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-jsc-0:2.48.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • webkitgtk4-jsc-devel-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • webkitgtk4-jsc-devel-0:2.48.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. This vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction. To mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface. Additionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality. Workaround: Setting the environment variable JSC_useFTLJIT=0 will disable the vulnerable code. (This will also somewhat slow down JavaScript execution.) Workaround: To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface. Workaround: Setting the environment variable JSC_useDFGJIT=0 will mitigate this issue. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: This vulnerability can be mitigated by setting the environment variable JSC_useWebAssembly=0, which will disable support for WebAssembly. It's not necessary to set this environment variable if you're already using JavaScriptCoreUseJIT=0 to mitigate other CVEs because WebAssembly depends on JIT. Workaround: This vulnerability can be mitigated by setting the environment variable JSC_useDFGJIT=0, which will disable the data flow graph JIT tier. It's not necessary to set this environment variable if you're already using JavaScriptCoreUseJIT=0 to mitigate other CVEs. Workaround: Do not process or load untrusted web content. Please update the affected package as soon as possible. Workaround: Do not process or load untrusted web content with WebKitGTK. Workaround: Do not process or load untrusted web content with WebKitGTK. Affected installations of Red Hat Enterprise Linux 7 can disable the JIT engine by setting the JavaScriptCoreUseJIT environment variable to 0. Additionally, in Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. This vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction. To mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface. Additionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality. Workaround: Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp. This vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction. To mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface. Additionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality. Workaround: Do not visit untrusted web pages or load untrusted web content with WebKitGTK. Workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface. Workaround: Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. This vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction. To mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface. Additionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.

🔗 References (230)