p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости webkit2gtk · Страница 2

За последние 30 дней в webkit2gtk опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 54

  1. CVE-2025-43501

    Средний · CVSS 4.3EPSS 0,77%Есть исправление

    CVE-2025-43501

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.4-0ubuntu0.25.10.1
    Опубликовано Обновлено
  2. CVE-2025-43511

    Средний · CVSS 6.5EPSS 0,46%Есть исправление

    CVE-2025-43511

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.52.3-0ubuntu0.25.10.1
    Опубликовано Обновлено
  3. CVE-2025-14174

    Высокий · CVSS 8.8EPSS 55,33%В каталоге KEVПубличный эксплойтЕсть исправление

    CVE-2025-14174

    Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

    • Обновитесь до 2.50.4-0ubuntu0.25.10.1
    Опубликовано Обновлено
  4. CVE-2025-66287

    Высокий · CVSS 8.8EPSS 0,47%Есть исправление

    Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

    A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

    • Обновитесь до 2.50.3-0ubuntu0.25.10.1
  5. CVE-2025-13947

    Высокий · CVSS 7.4EPSS 0,33%Есть исправление

    Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

    A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.

    • Обновитесь до 2.50.3-0ubuntu0.25.10.1
    Опубликовано Обновлено
  6. CVE-2025-13502

    Высокий · CVSS 7.5EPSS 0,62%Есть исправление

    Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

    A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
  7. CVE-2025-43430

    Средний · CVSS 4.3EPSS 1,09%Есть исправление

    CVE-2025-43430

    This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  8. CVE-2025-43427

    Средний · CVSS 4.3EPSS 0,55%Есть исправление

    CVE-2025-43427

    This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  9. CVE-2025-43431

    Высокий · CVSS 8.8EPSS 0,85%Есть исправление

    CVE-2025-43431

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  10. CVE-2025-43457

    Средний · CVSS 6.5EPSS 0,61%Есть исправление

    CVE-2025-43457

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    • Обновитесь до 2.52.3-0ubuntu0.25.10.1
  11. CVE-2025-43441

    Средний · CVSS 4.3EPSS 0,96%Есть исправление

    CVE-2025-43441

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  12. CVE-2025-43421

    Средний · CVSS 4.3EPSS 0,65%Есть исправление

    CVE-2025-43421

    Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.3-0ubuntu0.25.10.1
    Опубликовано Обновлено
  13. CVE-2025-43440

    Средний · CVSS 6.5EPSS 0,51%Есть исправление

    CVE-2025-43440

    This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  14. CVE-2025-43438

    Средний · CVSS 4.3EPSS 1,11%Есть исправление

    CVE-2025-43438

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  15. CVE-2025-43443

    Средний · CVSS 4.3EPSS 0,72%Есть исправление

    CVE-2025-43443

    This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  16. CVE-2025-43434

    Средний · CVSS 4.3EPSS 1,28%Есть исправление

    CVE-2025-43434

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  17. CVE-2025-43458

    Средний · CVSS 4.3EPSS 0,61%Есть исправление

    CVE-2025-43458

    This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.3-0ubuntu0.25.10.1
    Опубликовано Обновлено
  18. CVE-2025-43419

    Высокий · CVSS 8.8EPSS 0,4%Есть исправление

    CVE-2025-43419

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption.

    • Обновитесь до 2.50.0-2ubuntu1.1
    Опубликовано Обновлено
  19. CVE-2025-43432

    Средний · CVSS 4.3EPSS 0,84%Есть исправление

    CVE-2025-43432

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено
  20. CVE-2025-43392

    Средний · CVSS 4.3EPSS 0,5%Есть исправление

    CVE-2025-43392

    The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.

    • Обновитесь до 2.50.2-0ubuntu0.25.10.2
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →