Vulnerability-Lookup

CVE-2025-31277 (GCVE-0-2025-31277)

Vulnerability from cvelistv5 – Published: 2025-07-29 23:29 – Updated: 2026-06-30 03:16

CISA KEVIntel

Summary

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Processing maliciously crafted web content may lead to memory corruption
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

apple

References

25 references

URL	Tags
https://support.apple.com/en-us/124147
https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124152
https://support.apple.com/en-us/124153
https://support.apple.com/en-us/124154
https://support.apple.com/en-us/124155
https://cloud.google.com/blog/topics/threat-intel…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
http://seclists.org/fulldisclosure/2025/Aug/0
http://seclists.org/fulldisclosure/2025/Jul/36
http://seclists.org/fulldisclosure/2025/Jul/32
http://seclists.org/fulldisclosure/2025/Jul/30
https://access.redhat.com/security/cve/CVE-2025-31277	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2448780	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2025:19352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17802	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19157	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19165	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19109	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17807	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17643	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17743	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17741	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18097	vendor-advisoryx_refsource_REDHAT

Impacted products

23 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 18.6 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.6 (custom)
Apple	macOS	Affected: 0 , < 15.6 (custom)
Apple	tvOS	Affected: 0 , < 18.6 (custom)
Apple	visionOS	Affected: 0 , < 2.6 (custom)
Apple	watchOS	Affected: 0 , < 11.6 (custom)
Red Hat	Red Hat Enterprise Linux Server (v. 7 ELS)	cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux Server Optional (v. 7 ELS)	cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux AppStream (v. 8)	cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux AppStream AUS (v. 8.2)	cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux AppStream AUS (v.8.4)	cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)	cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux AppStream AUS (v.8.6)	cpe:/a:redhat:rhel_aus:8.6::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.8.6)	cpe:/a:redhat:rhel_e4s:8.6::appstream
Red Hat	Red Hat Enterprise Linux AppStream TUS (v.8.6)	cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.8.8)	cpe:/a:redhat:rhel_e4s:8.8::appstream
Red Hat	Red Hat Enterprise Linux AppStream TUS (v.8.8)	cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.9.0)	cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.9.2)	cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux AppStream EUS (v.9.4)	cpe:/a:redhat:rhel_eus:9.4::appstream
Red Hat	Red Hat Enterprise Linux AppStream (v. 9)	cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 274f0726-4043-49ae-b09c-dd4c5e739b43

Vulnerability ID: CVE-2025-31277

Status: Confirmed

Status Updated: 2026-03-20 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-03-20

Asserted: 2026-03-20

Scope

Notes: KEV entry: Apple Multiple Products Buffer Overflow Vulnerability | Affected: Apple / Multiple Products | Description: Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-04-03 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://support.apple.com/en-us/124147 ; https://support.apple.com/en-us/124149 ; https://support.apple.com/en-us/124152 ; https://support.apple.com/en-us/124153 ; https://support.apple.com/en-us/124155 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31277

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-119
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Multiple Products
Due Date	2026-04-03
Date Added	2026-03-20
Vendorproject	Apple
Vulnerabilityname	Apple Multiple Products Buffer Overflow Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2025-31277

Created: 2026-03-20 16:00 UTC | Updated: 2026-03-20 16:00 UTC

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: ba427766-500c-4fca-bb6a-7a5ad59f4d6b

Vulnerability ID: CVE-2025-31277

Status: Confirmed

Status Updated: 2026-06-01 13:30 UTC

Exploited: Yes

Timestamps

First Seen: 2026-06-01

Asserted: 2026-06-01

Scope

Notes: KEVIntel entry: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,... | Affected: Apple / Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 8.8 (HIGH) | EPSS: 0.01428 | Used in malware: unknown | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,...
Vendor	Apple
Product	Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS
Added Date	2026-06-01T13:30:35.304Z
Cvss Score	8.8
Epss Score	0.01428
Cvss Severity	HIGH
Epss Percentile	0.69501
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-23 14:03 UTC | Updated: 2026-06-23 14:03 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31277",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-31T03:56:01.249253Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31277",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-21T04:00:59.438579Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-03-20",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T13:14:07.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:52:50.809Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Aug/0"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jul/36"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jul/32"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jul/30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux Server (v. 7 ELS)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.2::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.6::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.6::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 9)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-18T00:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T03:16:57.786Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2025-31277"
          },
          {
            "name": "RHBZ#2448780",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19352"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17802"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19157"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19165"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19109"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17807"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17643"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17743"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17741"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:18097"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2025:19352: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17802: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19157: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19165: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19109: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17807: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17643: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17743: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17741: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:18097: Red Hat Enterprise Linux AppStream (v. 9)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-18T20:06:11.785Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-18T00:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
        "workarounds": [
          {
            "lang": "en",
            "value": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:27:12.615Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/124147"
        },
        {
          "url": "https://support.apple.com/en-us/124149"
        },
        {
          "url": "https://support.apple.com/en-us/124152"
        },
        {
          "url": "https://support.apple.com/en-us/124153"
        },
        {
          "url": "https://support.apple.com/en-us/124154"
        },
        {
          "url": "https://support.apple.com/en-us/124155"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31277",
    "datePublished": "2025-07-29T23:29:31.341Z",
    "dateReserved": "2025-03-27T16:13:58.344Z",
    "dateUpdated": "2026-06-30T03:16:57.786Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2025-31277",
      "cwes": "[\"CWE-119\"]",
      "dateAdded": "2026-03-20",
      "dueDate": "2026-04-03",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://support.apple.com/en-us/124147 ; https://support.apple.com/en-us/124149 ; https://support.apple.com/en-us/124152 ; https://support.apple.com/en-us/124153 ; https://support.apple.com/en-us/124155 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31277",
      "product": "Multiple Products",
      "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.",
      "vendorProject": "Apple",
      "vulnerabilityName": "Apple Multiple Products Buffer Overflow Vulnerability"
    },
    "epss": {
      "cve": "CVE-2025-31277",
      "date": "2026-06-30",
      "epss": "0.01481",
      "percentile": "0.70698"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-31277\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-07-30T00:15:30.830\",\"lastModified\":\"2026-06-30T03:16:48.060\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.\"},{\"lang\":\"es\",\"value\":\"El problema se solucion\u00f3 mejorando la gesti\u00f3n de la memoria. Este problema est\u00e1 corregido en watchOS 11.6, visionOS 2.6, iOS 18.6 y iPadOS 18.6, macOS Sequoia 15.6 y tvOS 18.6. El procesamiento de contenido web manipulado con fines malintencionados puede provocar da\u00f1os en la memoria.\"}],\"affected\":[{\"source\":\"product-security@apple.com\",\"affectedData\":[{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"15.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"11.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-07-31T03:56:01.249253Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-21T04:00:59.438579Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-07-31T03:56:01.249253Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-21T04:00:59.438579Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2026-03-20\",\"cisaActionDue\":\"2026-04-03\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"Apple Multiple Products Buffer Overflow Vulnerability\",\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"969AD7A8-5CCF-4607-BBE8-E06E642A170C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"8ED4015E-C707-4A91-86B3-23100E0DFA8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"BD9D42A7-DE2A-4D5A-8C7B-002A60148483\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"15.0\",\"versionEndExcluding\":\"15.6\",\"matchCriteriaId\":\"4CF17CE2-DB4B-48D1-81AF-67EF1EC7BB45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"FBC1698A-3E9C-4055-B23A-13A3C22BD6EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.6\",\"matchCriteriaId\":\"EADBC0BD-ECAC-4E0A-B490-24649AFE5355\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.6\",\"matchCriteriaId\":\"35D9C2D7-6120-4631-8D0B-259641DFD85B\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/124147\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124149\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124152\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124153\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124154\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124155\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Aug/0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Jul/30\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Jul/32\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Jul/36\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17643\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17741\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17743\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17802\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17807\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18097\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19109\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19157\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19165\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19352\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-31277\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2448780\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Technical Description\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://seclists.org/fulldisclosure/2025/Aug/0\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Jul/36\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Jul/32\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Jul/30\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T19:52:50.809Z\"}}, {\"title\": \"webkitgtk: Processing maliciously crafted web content may lead to memory corruption\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-18T20:06:11.785Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-18T00:00:00.000Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2025:19352: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17802: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19157: Red Hat Enterprise Linux AppStream AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19165: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19109: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17807: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17643: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17743: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17741: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:18097: Red Hat Enterprise Linux AppStream (v. 9)\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-18T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2025-31277\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2448780\", \"name\": \"RHBZ#2448780\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19352\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17802\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19157\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19165\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19109\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17807\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17643\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17743\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17741\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18097\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Do not process or load untrusted web content with WebKitGTK.\\n\\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\\n\\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\\n\\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\\n\\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-120\", \"description\": \"Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-06-30T03:16:57.786Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31277\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-21T04:00:59.438579Z\"}}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31277\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-21T04:00:59.438579Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2026-03-20\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277\"}}}], \"references\": [{\"url\": \"https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/\", \"tags\": [\"third-party-advisory\"]}, {\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277\", \"tags\": [\"government-resource\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-119\", \"description\": \"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-07-30T13:27:56.030Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"15.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"11.6\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/124147\"}, {\"url\": \"https://support.apple.com/en-us/124149\"}, {\"url\": \"https://support.apple.com/en-us/124152\"}, {\"url\": \"https://support.apple.com/en-us/124153\"}, {\"url\": \"https://support.apple.com/en-us/124154\"}, {\"url\": \"https://support.apple.com/en-us/124155\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Processing maliciously crafted web content may lead to memory corruption\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2026-04-02T18:27:12.615Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-31277\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-30T03:16:57.786Z\", \"dateReserved\": \"2025-03-27T16:13:58.344Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-07-29T23:29:31.341Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2025-AVI-0640

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.

Google indique que la vulnérabilité CVE-2025-6558 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	tvOS versions antérieures à 18.6
Apple	iOS	iOS versions antérieures à 18.6
Apple	N/A	visionOS versions antérieures à 2.6
Apple	iPadOS	iPadOS versions 18.x antérieures à 18.6
Apple	macOS	macOS Sequoia versions antérieures à 15.6
Apple	iPadOS	iPadOS versions antérieures à 17.7.9
Apple	macOS	macOS Ventura versions antérieures à 13.7.7
Apple	macOS	macOS Sonoma versions antérieures à 14.7.7
Apple	N/A	watchOS versions antérieures à 11.6

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 124150	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124155	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124149	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124151	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124147	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124153	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124154	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124148	2025-07-29	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 2.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions 18.x ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.6",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 17.7.9",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.7.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.7.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 11.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-24224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24224"
    },
    {
      "name": "CVE-2025-43241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43241"
    },
    {
      "name": "CVE-2025-31277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
    },
    {
      "name": "CVE-2025-43206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43206"
    },
    {
      "name": "CVE-2025-43222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43222"
    },
    {
      "name": "CVE-2025-43251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43251"
    },
    {
      "name": "CVE-2025-31273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31273"
    },
    {
      "name": "CVE-2025-43191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43191"
    },
    {
      "name": "CVE-2025-43189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43189"
    },
    {
      "name": "CVE-2025-43234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43234"
    },
    {
      "name": "CVE-2025-43254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43254"
    },
    {
      "name": "CVE-2025-43245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43245"
    },
    {
      "name": "CVE-2025-43214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43214"
    },
    {
      "name": "CVE-2025-43212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43212"
    },
    {
      "name": "CVE-2025-43274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43274"
    },
    {
      "name": "CVE-2025-43192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43192"
    },
    {
      "name": "CVE-2025-43266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43266"
    },
    {
      "name": "CVE-2025-43273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43273"
    },
    {
      "name": "CVE-2025-43275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43275"
    },
    {
      "name": "CVE-2025-43224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43224"
    },
    {
      "name": "CVE-2025-43252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43252"
    },
    {
      "name": "CVE-2025-43239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43239"
    },
    {
      "name": "CVE-2025-43197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43197"
    },
    {
      "name": "CVE-2025-43235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43235"
    },
    {
      "name": "CVE-2025-43243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43243"
    },
    {
      "name": "CVE-2025-43240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43240"
    },
    {
      "name": "CVE-2025-43256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43256"
    },
    {
      "name": "CVE-2025-43236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43236"
    },
    {
      "name": "CVE-2025-31279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31279"
    },
    {
      "name": "CVE-2025-43202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43202"
    },
    {
      "name": "CVE-2025-43259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43259"
    },
    {
      "name": "CVE-2025-43270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43270"
    },
    {
      "name": "CVE-2025-43210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43210"
    },
    {
      "name": "CVE-2025-43193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43193"
    },
    {
      "name": "CVE-2025-43227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43227"
    },
    {
      "name": "CVE-2025-31278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31278"
    },
    {
      "name": "CVE-2025-43237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43237"
    },
    {
      "name": "CVE-2025-43225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43225"
    },
    {
      "name": "CVE-2025-31243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31243"
    },
    {
      "name": "CVE-2025-43253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43253"
    },
    {
      "name": "CVE-2025-43217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43217"
    },
    {
      "name": "CVE-2025-43257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43257"
    },
    {
      "name": "CVE-2025-43277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43277"
    },
    {
      "name": "CVE-2025-31281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31281"
    },
    {
      "name": "CVE-2025-43219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43219"
    },
    {
      "name": "CVE-2025-7425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
    },
    {
      "name": "CVE-2025-43233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43233"
    },
    {
      "name": "CVE-2025-24220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24220"
    },
    {
      "name": "CVE-2025-24119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24119"
    },
    {
      "name": "CVE-2025-31275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31275"
    },
    {
      "name": "CVE-2025-31229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31229"
    },
    {
      "name": "CVE-2025-43199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43199"
    },
    {
      "name": "CVE-2025-43220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43220"
    },
    {
      "name": "CVE-2025-31280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31280"
    },
    {
      "name": "CVE-2025-43255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43255"
    },
    {
      "name": "CVE-2025-43229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43229"
    },
    {
      "name": "CVE-2025-43211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43211"
    },
    {
      "name": "CVE-2025-43209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43209"
    },
    {
      "name": "CVE-2025-43186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43186"
    },
    {
      "name": "CVE-2025-6558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
    },
    {
      "name": "CVE-2025-43249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43249"
    },
    {
      "name": "CVE-2025-43228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43228"
    },
    {
      "name": "CVE-2025-43188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43188"
    },
    {
      "name": "CVE-2025-43265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43265"
    },
    {
      "name": "CVE-2025-43264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43264"
    },
    {
      "name": "CVE-2025-43268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43268"
    },
    {
      "name": "CVE-2025-43248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43248"
    },
    {
      "name": "CVE-2025-43247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43247"
    },
    {
      "name": "CVE-2025-43213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43213"
    },
    {
      "name": "CVE-2025-43216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43216"
    },
    {
      "name": "CVE-2025-43232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43232"
    },
    {
      "name": "CVE-2025-31276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31276"
    },
    {
      "name": "CVE-2025-43261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43261"
    },
    {
      "name": "CVE-2025-43276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43276"
    },
    {
      "name": "CVE-2025-43226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43226"
    },
    {
      "name": "CVE-2025-43223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43223"
    },
    {
      "name": "CVE-2025-43246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43246"
    },
    {
      "name": "CVE-2025-43260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43260"
    },
    {
      "name": "CVE-2025-43215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43215"
    },
    {
      "name": "CVE-2025-43238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43238"
    },
    {
      "name": "CVE-2025-43198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43198"
    },
    {
      "name": "CVE-2025-43230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43230"
    },
    {
      "name": "CVE-2025-43250",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43250"
    },
    {
      "name": "CVE-2025-43196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43196"
    },
    {
      "name": "CVE-2025-43218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43218"
    },
    {
      "name": "CVE-2025-24188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24188"
    },
    {
      "name": "CVE-2025-7424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
    },
    {
      "name": "CVE-2025-43194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43194"
    },
    {
      "name": "CVE-2025-43267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43267"
    },
    {
      "name": "CVE-2025-43195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43195"
    },
    {
      "name": "CVE-2025-43185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43185"
    },
    {
      "name": "CVE-2025-43184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43184"
    },
    {
      "name": "CVE-2025-43244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43244"
    },
    {
      "name": "CVE-2025-43187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43187"
    },
    {
      "name": "CVE-2025-43221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43221"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0640",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-07-30T00:00:00.000000"
    },
    {
      "description": "Google indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6558 est activement exploit\u00e9e.",
      "revision_date": "2025-07-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6558 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124150",
      "url": "https://support.apple.com/en-us/124150"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124155",
      "url": "https://support.apple.com/en-us/124155"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124149",
      "url": "https://support.apple.com/en-us/124149"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124151",
      "url": "https://support.apple.com/en-us/124151"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124147",
      "url": "https://support.apple.com/en-us/124147"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124153",
      "url": "https://support.apple.com/en-us/124153"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124154",
      "url": "https://support.apple.com/en-us/124154"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124148",
      "url": "https://support.apple.com/en-us/124148"
    }
  ]
}

CERTFR-2025-AVI-0642

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Apple Safari. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).

Google indique que la vulnérabilité CVE-2025-6558 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Apple	Safari	Safari versions antérieures à 18.6

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 124152

2025-07-30

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-31277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
    },
    {
      "name": "CVE-2025-31273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31273"
    },
    {
      "name": "CVE-2025-43214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43214"
    },
    {
      "name": "CVE-2025-43212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43212"
    },
    {
      "name": "CVE-2025-43240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43240"
    },
    {
      "name": "CVE-2025-43227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43227"
    },
    {
      "name": "CVE-2025-31278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31278"
    },
    {
      "name": "CVE-2025-7425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
    },
    {
      "name": "CVE-2025-43229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43229"
    },
    {
      "name": "CVE-2025-43211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43211"
    },
    {
      "name": "CVE-2025-6558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
    },
    {
      "name": "CVE-2025-43228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43228"
    },
    {
      "name": "CVE-2025-43265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43265"
    },
    {
      "name": "CVE-2025-43213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43213"
    },
    {
      "name": "CVE-2025-43216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43216"
    },
    {
      "name": "CVE-2025-24188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24188"
    },
    {
      "name": "CVE-2025-7424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0642",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-07-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple Safari. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection de code indirecte \u00e0 distance (XSS).\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6558 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Safari",
  "vendor_advisories": [
    {
      "published_at": "2025-07-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124152",
      "url": "https://support.apple.com/en-us/124152"
    }
  ]
}

CERTFR-2025-AVI-0640

Vulnerability from certfr_avis - Published: - Updated:

Google indique que la vulnérabilité CVE-2025-6558 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	tvOS versions antérieures à 18.6
Apple	iOS	iOS versions antérieures à 18.6
Apple	N/A	visionOS versions antérieures à 2.6
Apple	iPadOS	iPadOS versions 18.x antérieures à 18.6
Apple	macOS	macOS Sequoia versions antérieures à 15.6
Apple	iPadOS	iPadOS versions antérieures à 17.7.9
Apple	macOS	macOS Ventura versions antérieures à 13.7.7
Apple	macOS	macOS Sonoma versions antérieures à 14.7.7
Apple	N/A	watchOS versions antérieures à 11.6

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 124150	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124155	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124149	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124151	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124147	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124153	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124154	2025-07-29	vendor-advisory
Bulletin de sécurité Apple 124148	2025-07-29	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 2.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions 18.x ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.6",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 17.7.9",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.7.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.7.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 11.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-24224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24224"
    },
    {
      "name": "CVE-2025-43241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43241"
    },
    {
      "name": "CVE-2025-31277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
    },
    {
      "name": "CVE-2025-43206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43206"
    },
    {
      "name": "CVE-2025-43222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43222"
    },
    {
      "name": "CVE-2025-43251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43251"
    },
    {
      "name": "CVE-2025-31273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31273"
    },
    {
      "name": "CVE-2025-43191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43191"
    },
    {
      "name": "CVE-2025-43189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43189"
    },
    {
      "name": "CVE-2025-43234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43234"
    },
    {
      "name": "CVE-2025-43254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43254"
    },
    {
      "name": "CVE-2025-43245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43245"
    },
    {
      "name": "CVE-2025-43214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43214"
    },
    {
      "name": "CVE-2025-43212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43212"
    },
    {
      "name": "CVE-2025-43274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43274"
    },
    {
      "name": "CVE-2025-43192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43192"
    },
    {
      "name": "CVE-2025-43266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43266"
    },
    {
      "name": "CVE-2025-43273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43273"
    },
    {
      "name": "CVE-2025-43275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43275"
    },
    {
      "name": "CVE-2025-43224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43224"
    },
    {
      "name": "CVE-2025-43252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43252"
    },
    {
      "name": "CVE-2025-43239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43239"
    },
    {
      "name": "CVE-2025-43197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43197"
    },
    {
      "name": "CVE-2025-43235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43235"
    },
    {
      "name": "CVE-2025-43243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43243"
    },
    {
      "name": "CVE-2025-43240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43240"
    },
    {
      "name": "CVE-2025-43256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43256"
    },
    {
      "name": "CVE-2025-43236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43236"
    },
    {
      "name": "CVE-2025-31279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31279"
    },
    {
      "name": "CVE-2025-43202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43202"
    },
    {
      "name": "CVE-2025-43259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43259"
    },
    {
      "name": "CVE-2025-43270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43270"
    },
    {
      "name": "CVE-2025-43210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43210"
    },
    {
      "name": "CVE-2025-43193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43193"
    },
    {
      "name": "CVE-2025-43227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43227"
    },
    {
      "name": "CVE-2025-31278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31278"
    },
    {
      "name": "CVE-2025-43237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43237"
    },
    {
      "name": "CVE-2025-43225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43225"
    },
    {
      "name": "CVE-2025-31243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31243"
    },
    {
      "name": "CVE-2025-43253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43253"
    },
    {
      "name": "CVE-2025-43217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43217"
    },
    {
      "name": "CVE-2025-43257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43257"
    },
    {
      "name": "CVE-2025-43277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43277"
    },
    {
      "name": "CVE-2025-31281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31281"
    },
    {
      "name": "CVE-2025-43219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43219"
    },
    {
      "name": "CVE-2025-7425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
    },
    {
      "name": "CVE-2025-43233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43233"
    },
    {
      "name": "CVE-2025-24220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24220"
    },
    {
      "name": "CVE-2025-24119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24119"
    },
    {
      "name": "CVE-2025-31275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31275"
    },
    {
      "name": "CVE-2025-31229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31229"
    },
    {
      "name": "CVE-2025-43199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43199"
    },
    {
      "name": "CVE-2025-43220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43220"
    },
    {
      "name": "CVE-2025-31280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31280"
    },
    {
      "name": "CVE-2025-43255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43255"
    },
    {
      "name": "CVE-2025-43229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43229"
    },
    {
      "name": "CVE-2025-43211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43211"
    },
    {
      "name": "CVE-2025-43209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43209"
    },
    {
      "name": "CVE-2025-43186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43186"
    },
    {
      "name": "CVE-2025-6558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
    },
    {
      "name": "CVE-2025-43249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43249"
    },
    {
      "name": "CVE-2025-43228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43228"
    },
    {
      "name": "CVE-2025-43188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43188"
    },
    {
      "name": "CVE-2025-43265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43265"
    },
    {
      "name": "CVE-2025-43264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43264"
    },
    {
      "name": "CVE-2025-43268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43268"
    },
    {
      "name": "CVE-2025-43248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43248"
    },
    {
      "name": "CVE-2025-43247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43247"
    },
    {
      "name": "CVE-2025-43213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43213"
    },
    {
      "name": "CVE-2025-43216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43216"
    },
    {
      "name": "CVE-2025-43232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43232"
    },
    {
      "name": "CVE-2025-31276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31276"
    },
    {
      "name": "CVE-2025-43261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43261"
    },
    {
      "name": "CVE-2025-43276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43276"
    },
    {
      "name": "CVE-2025-43226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43226"
    },
    {
      "name": "CVE-2025-43223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43223"
    },
    {
      "name": "CVE-2025-43246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43246"
    },
    {
      "name": "CVE-2025-43260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43260"
    },
    {
      "name": "CVE-2025-43215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43215"
    },
    {
      "name": "CVE-2025-43238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43238"
    },
    {
      "name": "CVE-2025-43198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43198"
    },
    {
      "name": "CVE-2025-43230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43230"
    },
    {
      "name": "CVE-2025-43250",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43250"
    },
    {
      "name": "CVE-2025-43196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43196"
    },
    {
      "name": "CVE-2025-43218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43218"
    },
    {
      "name": "CVE-2025-24188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24188"
    },
    {
      "name": "CVE-2025-7424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
    },
    {
      "name": "CVE-2025-43194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43194"
    },
    {
      "name": "CVE-2025-43267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43267"
    },
    {
      "name": "CVE-2025-43195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43195"
    },
    {
      "name": "CVE-2025-43185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43185"
    },
    {
      "name": "CVE-2025-43184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43184"
    },
    {
      "name": "CVE-2025-43244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43244"
    },
    {
      "name": "CVE-2025-43187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43187"
    },
    {
      "name": "CVE-2025-43221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43221"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0640",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-07-30T00:00:00.000000"
    },
    {
      "description": "Google indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6558 est activement exploit\u00e9e.",
      "revision_date": "2025-07-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6558 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124150",
      "url": "https://support.apple.com/en-us/124150"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124155",
      "url": "https://support.apple.com/en-us/124155"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124149",
      "url": "https://support.apple.com/en-us/124149"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124151",
      "url": "https://support.apple.com/en-us/124151"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124147",
      "url": "https://support.apple.com/en-us/124147"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124153",
      "url": "https://support.apple.com/en-us/124153"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124154",
      "url": "https://support.apple.com/en-us/124154"
    },
    {
      "published_at": "2025-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124148",
      "url": "https://support.apple.com/en-us/124148"
    }
  ]
}

CERTFR-2025-AVI-0642

Vulnerability from certfr_avis - Published: - Updated:

Google indique que la vulnérabilité CVE-2025-6558 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Apple	Safari	Safari versions antérieures à 18.6

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 124152

2025-07-30

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 18.6",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-31277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
    },
    {
      "name": "CVE-2025-31273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31273"
    },
    {
      "name": "CVE-2025-43214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43214"
    },
    {
      "name": "CVE-2025-43212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43212"
    },
    {
      "name": "CVE-2025-43240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43240"
    },
    {
      "name": "CVE-2025-43227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43227"
    },
    {
      "name": "CVE-2025-31278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31278"
    },
    {
      "name": "CVE-2025-7425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
    },
    {
      "name": "CVE-2025-43229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43229"
    },
    {
      "name": "CVE-2025-43211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43211"
    },
    {
      "name": "CVE-2025-6558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
    },
    {
      "name": "CVE-2025-43228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43228"
    },
    {
      "name": "CVE-2025-43265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43265"
    },
    {
      "name": "CVE-2025-43213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43213"
    },
    {
      "name": "CVE-2025-43216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-43216"
    },
    {
      "name": "CVE-2025-24188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24188"
    },
    {
      "name": "CVE-2025-7424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0642",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-07-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple Safari. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection de code indirecte \u00e0 distance (XSS).\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6558 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Safari",
  "vendor_advisories": [
    {
      "published_at": "2025-07-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 124152",
      "url": "https://support.apple.com/en-us/124152"
    }
  ]
}

FKIE_CVE-2025-31277

Vulnerability from fkie_nvd - Published: 2025-07-30 00:15 - Updated: 2026-06-17 09:10

CISA KEVIntel

Severity

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/124147	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/124149	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/124152	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/124153	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/124154	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/124155	Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/Aug/0	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/Jul/30	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/Jul/32	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/Jul/36	Mailing List, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/	Technical Description
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277	US Government Resource

Impacted products

Vendor	Product	Version
apple	safari	*
apple	ipados	*
apple	iphone_os	*
apple	macos	*
apple	tvos	*
apple	visionos	*
apple	watchos	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "product-security@apple.com"
    }
  ],
  "cisaActionDue": "2026-04-03",
  "cisaExploitAdd": "2026-03-20",
  "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Apple Multiple Products Buffer Overflow Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "969AD7A8-5CCF-4607-BBE8-E06E642A170C",
              "versionEndExcluding": "18.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8ED4015E-C707-4A91-86B3-23100E0DFA8F",
              "versionEndExcluding": "18.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD9D42A7-DE2A-4D5A-8C7B-002A60148483",
              "versionEndExcluding": "18.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CF17CE2-DB4B-48D1-81AF-67EF1EC7BB45",
              "versionEndExcluding": "15.6",
              "versionStartIncluding": "15.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBC1698A-3E9C-4055-B23A-13A3C22BD6EE",
              "versionEndExcluding": "18.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EADBC0BD-ECAC-4E0A-B490-24649AFE5355",
              "versionEndExcluding": "2.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "35D9C2D7-6120-4631-8D0B-259641DFD85B",
              "versionEndExcluding": "11.6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption."
    },
    {
      "lang": "es",
      "value": "El problema se solucion\u00f3 mejorando la gesti\u00f3n de la memoria. Este problema est\u00e1 corregido en watchOS 11.6, visionOS 2.6, iOS 18.6 y iPadOS 18.6, macOS Sequoia 15.6 y tvOS 18.6. El procesamiento de contenido web manipulado con fines malintencionados puede provocar da\u00f1os en la memoria."
    }
  ],
  "id": "CVE-2025-31277",
  "lastModified": "2026-06-17T09:10:13.060",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-31277",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-07-31T03:56:01.249253Z",
          "version": "2.0.3"
        }
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-31277",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-03-21T04:00:59.438579Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-07-30T00:15:30.830",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/124147"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/124149"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/124152"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/124153"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/124154"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/124155"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2025/Aug/0"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2025/Jul/30"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2025/Jul/32"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2025/Jul/36"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Technical Description"
      ],
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-VRFH-8V52-6452

Vulnerability from github – Published: 2025-07-30 00:32 – Updated: 2026-06-30 03:35

Details

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-31277"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119",
      "CWE-120"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-07-30T00:15:30Z",
    "severity": "HIGH"
  },
  "details": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.",
  "id": "GHSA-vrfh-8v52-6452",
  "modified": "2026-06-30T03:35:20Z",
  "published": "2025-07-30T00:32:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/124155"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/124154"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/124153"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/124152"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/124149"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/124147"
    },
    {
      "type": "WEB",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json"
    },
    {
      "type": "WEB",
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2025-31277"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:19352"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:19165"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:19157"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:19109"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:18097"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:17807"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:17802"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:17743"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:17741"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:17643"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/Aug/0"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/Jul/30"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/Jul/32"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/Jul/36"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2025-0238

Vulnerability from csaf_ncscnl - Published: 2025-07-30 13:02 - Updated: 2025-07-30 13:02

Summary

Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Apple heeft kwetsbaarheden verholpen in macOS, iOS en iPadOS.

Interpretaties: De kwetsbaarheden omvatten verschillende problemen, zoals onvoldoende validatie van invoer, geheugenbeschadiging, en logica-issues die kunnen leiden tot ongeautoriseerde toegang tot gevoelige gebruikersdata. Deze kwetsbaarheden kunnen door kwaadwillenden worden misbruikt om root-rechten te verkrijgen, applicaties te laten crashen, of om toegang te krijgen tot beschermde systeemcomponenten.

Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

CWE-416: Use After Free

CWE-20: Improper Input Validation

CVE-2025-43187

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43188

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43189

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43191

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43192

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43193

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43194

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43195

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43196

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43197

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43198

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43199

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43202

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43206

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43209

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43210

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43211

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43212

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43213

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43214

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43215

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43216

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43218

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43219

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43220

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43221

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43222

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43223

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43224

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43225

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43226

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43227

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43229

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43230

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43232

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43273

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43274

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43275

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43276

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43277

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-6558

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-7424

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-7425

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-24188

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31243

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31273

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31275

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31277

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31278

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31279

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31280

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-31281

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43185

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43186

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43233

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43234

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43235

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43236

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43237

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43238

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43239

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43240

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43241

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43243

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43244

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43245

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43246

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43247

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43248

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43249

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43250

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43251

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43252

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43253

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43254

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43255

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43256

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43257

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43259

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43260

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43261

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43264

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43265

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43266

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43267

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43268

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

CVE-2025-43270

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
vers:unknown/unspecified\|<15.6 Apple / macOS		vers:unknown/unspecified\|<15.6
vers:apple/14.7.7 Apple / macOS Sonoma		vers:apple/14.7.7
vers:apple/13.7.7 Apple / macOS Ventura		vers:apple/13.7.7
vers:apple/unknown Apple / macOS Sequoia		vers:apple/unknown
vers:apple/17.7.9 Apple / iPadOS		vers:apple/17.7.9
vers:apple/18.6 Apple / iOS		vers:apple/18.6
vers:unknown/unspecified\|<18.6 Apple / iOS and iPadOS		vers:unknown/unspecified\|<18.6

References

94 references

URL	Category
https://support.apple.com/en-us/124147	external
https://support.apple.com/en-us/124149	external
https://support.apple.com/en-us/124150	external
https://support.apple.com/en-us/124151	external
https://support.apple.com/en-us/124153	external
https://support.apple.com/en-us/124154	external
https://support.apple.com/en-us/124155	external
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft kwetsbaarheden verholpen in macOS, iOS en iPadOS.\n\n",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten verschillende problemen, zoals onvoldoende validatie van invoer, geheugenbeschadiging, en logica-issues die kunnen leiden tot ongeautoriseerde toegang tot gevoelige gebruikersdata. Deze kwetsbaarheden kunnen door kwaadwillenden worden misbruikt om root-rechten te verkrijgen, applicaties te laten crashen, of om toegang te krijgen tot beschermde systeemcomponenten. ",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124147"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124149"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124150"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124151"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124153"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124154"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/124155"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS",
    "tracking": {
      "current_release_date": "2025-07-30T13:02:51.663320Z",
      "generator": {
        "date": "2025-06-05T14:45:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.1"
        }
      },
      "id": "NCSC-2025-0238",
      "initial_release_date": "2025-07-30T13:02:51.663320Z",
      "revision_history": [
        {
          "date": "2025-07-30T13:02:51.663320Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c15.6",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c15.6",
                  "product_id": "CSAFPID-1914575"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/14.7.7",
                "product": {
                  "name": "vers:apple/14.7.7",
                  "product_id": "CSAFPID-3011581"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Sonoma"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/13.7.7",
                "product": {
                  "name": "vers:apple/13.7.7",
                  "product_id": "CSAFPID-3011580"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Ventura"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/unknown",
                "product": {
                  "name": "vers:apple/unknown",
                  "product_id": "CSAFPID-1432304"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Sequoia"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/17.7.9",
                "product": {
                  "name": "vers:apple/17.7.9",
                  "product_id": "CSAFPID-3011582"
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/18.6",
                "product": {
                  "name": "vers:apple/18.6",
                  "product_id": "CSAFPID-3011583"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.6",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.6",
                  "product_id": "CSAFPID-3012712"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS and iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-43187",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43187 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43187.json"
        }
      ],
      "title": "CVE-2025-43187"
    },
    {
      "cve": "CVE-2025-43188",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43188 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43188.json"
        }
      ],
      "title": "CVE-2025-43188"
    },
    {
      "cve": "CVE-2025-43189",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43189 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43189.json"
        }
      ],
      "title": "CVE-2025-43189"
    },
    {
      "cve": "CVE-2025-43191",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43191 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43191.json"
        }
      ],
      "title": "CVE-2025-43191"
    },
    {
      "cve": "CVE-2025-43192",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43192 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43192.json"
        }
      ],
      "title": "CVE-2025-43192"
    },
    {
      "cve": "CVE-2025-43193",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43193 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43193.json"
        }
      ],
      "title": "CVE-2025-43193"
    },
    {
      "cve": "CVE-2025-43194",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43194 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43194.json"
        }
      ],
      "title": "CVE-2025-43194"
    },
    {
      "cve": "CVE-2025-43195",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43195 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43195.json"
        }
      ],
      "title": "CVE-2025-43195"
    },
    {
      "cve": "CVE-2025-43196",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43196 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43196.json"
        }
      ],
      "title": "CVE-2025-43196"
    },
    {
      "cve": "CVE-2025-43197",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43197 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43197.json"
        }
      ],
      "title": "CVE-2025-43197"
    },
    {
      "cve": "CVE-2025-43198",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43198 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43198.json"
        }
      ],
      "title": "CVE-2025-43198"
    },
    {
      "cve": "CVE-2025-43199",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43199 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43199.json"
        }
      ],
      "title": "CVE-2025-43199"
    },
    {
      "cve": "CVE-2025-43202",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43202 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43202.json"
        }
      ],
      "title": "CVE-2025-43202"
    },
    {
      "cve": "CVE-2025-43206",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43206 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43206.json"
        }
      ],
      "title": "CVE-2025-43206"
    },
    {
      "cve": "CVE-2025-43209",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43209 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43209.json"
        }
      ],
      "title": "CVE-2025-43209"
    },
    {
      "cve": "CVE-2025-43210",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43210 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43210.json"
        }
      ],
      "title": "CVE-2025-43210"
    },
    {
      "cve": "CVE-2025-43211",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43211 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43211.json"
        }
      ],
      "title": "CVE-2025-43211"
    },
    {
      "cve": "CVE-2025-43212",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43212 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43212.json"
        }
      ],
      "title": "CVE-2025-43212"
    },
    {
      "cve": "CVE-2025-43213",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43213 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43213.json"
        }
      ],
      "title": "CVE-2025-43213"
    },
    {
      "cve": "CVE-2025-43214",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43214 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43214.json"
        }
      ],
      "title": "CVE-2025-43214"
    },
    {
      "cve": "CVE-2025-43215",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43215 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43215.json"
        }
      ],
      "title": "CVE-2025-43215"
    },
    {
      "cve": "CVE-2025-43216",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43216 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43216.json"
        }
      ],
      "title": "CVE-2025-43216"
    },
    {
      "cve": "CVE-2025-43218",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43218 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43218.json"
        }
      ],
      "title": "CVE-2025-43218"
    },
    {
      "cve": "CVE-2025-43219",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43219 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43219.json"
        }
      ],
      "title": "CVE-2025-43219"
    },
    {
      "cve": "CVE-2025-43220",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43220 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43220.json"
        }
      ],
      "title": "CVE-2025-43220"
    },
    {
      "cve": "CVE-2025-43221",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43221 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43221.json"
        }
      ],
      "title": "CVE-2025-43221"
    },
    {
      "cve": "CVE-2025-43222",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43222 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43222.json"
        }
      ],
      "title": "CVE-2025-43222"
    },
    {
      "cve": "CVE-2025-43223",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43223 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43223.json"
        }
      ],
      "title": "CVE-2025-43223"
    },
    {
      "cve": "CVE-2025-43224",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43224 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43224.json"
        }
      ],
      "title": "CVE-2025-43224"
    },
    {
      "cve": "CVE-2025-43225",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43225 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43225.json"
        }
      ],
      "title": "CVE-2025-43225"
    },
    {
      "cve": "CVE-2025-43226",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43226 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43226.json"
        }
      ],
      "title": "CVE-2025-43226"
    },
    {
      "cve": "CVE-2025-43227",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43227 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43227.json"
        }
      ],
      "title": "CVE-2025-43227"
    },
    {
      "cve": "CVE-2025-43229",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43229 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43229.json"
        }
      ],
      "title": "CVE-2025-43229"
    },
    {
      "cve": "CVE-2025-43230",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43230 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43230.json"
        }
      ],
      "title": "CVE-2025-43230"
    },
    {
      "cve": "CVE-2025-43232",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43232 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43232.json"
        }
      ],
      "title": "CVE-2025-43232"
    },
    {
      "cve": "CVE-2025-43273",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43273 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43273.json"
        }
      ],
      "title": "CVE-2025-43273"
    },
    {
      "cve": "CVE-2025-43274",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43274 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43274.json"
        }
      ],
      "title": "CVE-2025-43274"
    },
    {
      "cve": "CVE-2025-43275",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43275 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43275.json"
        }
      ],
      "title": "CVE-2025-43275"
    },
    {
      "cve": "CVE-2025-43276",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43276 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43276.json"
        }
      ],
      "title": "CVE-2025-43276"
    },
    {
      "cve": "CVE-2025-43277",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43277 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43277.json"
        }
      ],
      "title": "CVE-2025-43277"
    },
    {
      "cve": "CVE-2025-6558",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-6558 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-6558.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1914575",
            "CSAFPID-3011581",
            "CSAFPID-3011580",
            "CSAFPID-1432304",
            "CSAFPID-3011582",
            "CSAFPID-3011583",
            "CSAFPID-3012712"
          ]
        }
      ],
      "title": "CVE-2025-6558"
    },
    {
      "cve": "CVE-2025-7424",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-7424 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-7424.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1914575",
            "CSAFPID-3011581",
            "CSAFPID-3011580",
            "CSAFPID-1432304",
            "CSAFPID-3011582",
            "CSAFPID-3011583",
            "CSAFPID-3012712"
          ]
        }
      ],
      "title": "CVE-2025-7424"
    },
    {
      "cve": "CVE-2025-7425",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-7425 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-7425.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1914575",
            "CSAFPID-3011581",
            "CSAFPID-3011580",
            "CSAFPID-1432304",
            "CSAFPID-3011582",
            "CSAFPID-3011583",
            "CSAFPID-3012712"
          ]
        }
      ],
      "title": "CVE-2025-7425"
    },
    {
      "cve": "CVE-2025-24188",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24188 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-24188.json"
        }
      ],
      "title": "CVE-2025-24188"
    },
    {
      "cve": "CVE-2025-31243",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31243 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31243.json"
        }
      ],
      "title": "CVE-2025-31243"
    },
    {
      "cve": "CVE-2025-31273",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31273 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31273.json"
        }
      ],
      "title": "CVE-2025-31273"
    },
    {
      "cve": "CVE-2025-31275",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31275 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31275.json"
        }
      ],
      "title": "CVE-2025-31275"
    },
    {
      "cve": "CVE-2025-31277",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31277 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31277.json"
        }
      ],
      "title": "CVE-2025-31277"
    },
    {
      "cve": "CVE-2025-31278",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31278 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31278.json"
        }
      ],
      "title": "CVE-2025-31278"
    },
    {
      "cve": "CVE-2025-31279",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31279 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31279.json"
        }
      ],
      "title": "CVE-2025-31279"
    },
    {
      "cve": "CVE-2025-31280",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31280 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31280.json"
        }
      ],
      "title": "CVE-2025-31280"
    },
    {
      "cve": "CVE-2025-31281",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31281 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31281.json"
        }
      ],
      "title": "CVE-2025-31281"
    },
    {
      "cve": "CVE-2025-43185",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43185 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43185.json"
        }
      ],
      "title": "CVE-2025-43185"
    },
    {
      "cve": "CVE-2025-43186",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43186 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43186.json"
        }
      ],
      "title": "CVE-2025-43186"
    },
    {
      "cve": "CVE-2025-43233",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43233 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43233.json"
        }
      ],
      "title": "CVE-2025-43233"
    },
    {
      "cve": "CVE-2025-43234",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43234 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43234.json"
        }
      ],
      "title": "CVE-2025-43234"
    },
    {
      "cve": "CVE-2025-43235",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43235 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43235.json"
        }
      ],
      "title": "CVE-2025-43235"
    },
    {
      "cve": "CVE-2025-43236",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43236 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43236.json"
        }
      ],
      "title": "CVE-2025-43236"
    },
    {
      "cve": "CVE-2025-43237",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43237 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43237.json"
        }
      ],
      "title": "CVE-2025-43237"
    },
    {
      "cve": "CVE-2025-43238",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43238 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43238.json"
        }
      ],
      "title": "CVE-2025-43238"
    },
    {
      "cve": "CVE-2025-43239",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43239 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43239.json"
        }
      ],
      "title": "CVE-2025-43239"
    },
    {
      "cve": "CVE-2025-43240",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43240 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43240.json"
        }
      ],
      "title": "CVE-2025-43240"
    },
    {
      "cve": "CVE-2025-43241",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43241 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43241.json"
        }
      ],
      "title": "CVE-2025-43241"
    },
    {
      "cve": "CVE-2025-43243",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43243 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43243.json"
        }
      ],
      "title": "CVE-2025-43243"
    },
    {
      "cve": "CVE-2025-43244",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43244 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43244.json"
        }
      ],
      "title": "CVE-2025-43244"
    },
    {
      "cve": "CVE-2025-43245",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43245 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43245.json"
        }
      ],
      "title": "CVE-2025-43245"
    },
    {
      "cve": "CVE-2025-43246",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43246 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43246.json"
        }
      ],
      "title": "CVE-2025-43246"
    },
    {
      "cve": "CVE-2025-43247",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43247 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43247.json"
        }
      ],
      "title": "CVE-2025-43247"
    },
    {
      "cve": "CVE-2025-43248",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43248 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43248.json"
        }
      ],
      "title": "CVE-2025-43248"
    },
    {
      "cve": "CVE-2025-43249",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43249 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43249.json"
        }
      ],
      "title": "CVE-2025-43249"
    },
    {
      "cve": "CVE-2025-43250",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43250 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43250.json"
        }
      ],
      "title": "CVE-2025-43250"
    },
    {
      "cve": "CVE-2025-43251",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43251 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43251.json"
        }
      ],
      "title": "CVE-2025-43251"
    },
    {
      "cve": "CVE-2025-43252",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43252 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43252.json"
        }
      ],
      "title": "CVE-2025-43252"
    },
    {
      "cve": "CVE-2025-43253",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43253 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43253.json"
        }
      ],
      "title": "CVE-2025-43253"
    },
    {
      "cve": "CVE-2025-43254",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43254 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43254.json"
        }
      ],
      "title": "CVE-2025-43254"
    },
    {
      "cve": "CVE-2025-43255",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43255 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43255.json"
        }
      ],
      "title": "CVE-2025-43255"
    },
    {
      "cve": "CVE-2025-43256",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43256 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43256.json"
        }
      ],
      "title": "CVE-2025-43256"
    },
    {
      "cve": "CVE-2025-43257",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43257 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43257.json"
        }
      ],
      "title": "CVE-2025-43257"
    },
    {
      "cve": "CVE-2025-43259",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43259 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43259.json"
        }
      ],
      "title": "CVE-2025-43259"
    },
    {
      "cve": "CVE-2025-43260",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43260 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43260.json"
        }
      ],
      "title": "CVE-2025-43260"
    },
    {
      "cve": "CVE-2025-43261",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43261 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43261.json"
        }
      ],
      "title": "CVE-2025-43261"
    },
    {
      "cve": "CVE-2025-43264",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43264 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43264.json"
        }
      ],
      "title": "CVE-2025-43264"
    },
    {
      "cve": "CVE-2025-43265",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43265 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43265.json"
        }
      ],
      "title": "CVE-2025-43265"
    },
    {
      "cve": "CVE-2025-43266",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43266 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43266.json"
        }
      ],
      "title": "CVE-2025-43266"
    },
    {
      "cve": "CVE-2025-43267",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43267 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43267.json"
        }
      ],
      "title": "CVE-2025-43267"
    },
    {
      "cve": "CVE-2025-43268",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43268 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43268.json"
        }
      ],
      "title": "CVE-2025-43268"
    },
    {
      "cve": "CVE-2025-43270",
      "product_status": {
        "known_affected": [
          "CSAFPID-1914575",
          "CSAFPID-3011581",
          "CSAFPID-3011580",
          "CSAFPID-1432304",
          "CSAFPID-3011582",
          "CSAFPID-3011583",
          "CSAFPID-3012712"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43270 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43270.json"
        }
      ],
      "title": "CVE-2025-43270"
    }
  ]
}

RHSA-2025:17643

Vulnerability from csaf_redhat - Published: 2025-10-09 06:01 - Updated: 2026-06-30 13:38

Summary

Red Hat Security Advisory: webkit2gtk3 security update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342) * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-31223

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-31277

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2025-43272

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43342

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43356

A flaw was found in WebKitGTK. A malicious website can obtain access to sensor information without user consent due to improper handling of caches.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2025-43368

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43419

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

43 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:17643	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397626	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397627	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397628	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397630	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-31223	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448779	external
https://www.cve.org/CVERecord?id=CVE-2025-31223	external
https://nvd.nist.gov/vuln/detail/CVE-2025-31223	external
https://webkitgtk.org/security/WSA-2026-0001.html	external
https://access.redhat.com/security/cve/CVE-2025-31277	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448780	external
https://www.cve.org/CVERecord?id=CVE-2025-31277	external
https://nvd.nist.gov/vuln/detail/CVE-2025-31277	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2025-43272	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397626	external
https://www.cve.org/CVERecord?id=CVE-2025-43272	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43272	external
https://github.com/WebKit/WebKit/commit/fa8541307…	external
https://webkitgtk.org/security/WSA-2025-0006.html	external
https://access.redhat.com/security/cve/CVE-2025-43342	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397627	external
https://www.cve.org/CVERecord?id=CVE-2025-43342	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43342	external
https://github.com/WebKit/WebKit/commit/f3f7e7880…	external
https://access.redhat.com/security/cve/CVE-2025-43356	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397628	external
https://www.cve.org/CVERecord?id=CVE-2025-43356	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43356	external
https://github.com/WebKit/WebKit/commit/fbe01734a…	external
https://access.redhat.com/security/cve/CVE-2025-43368	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397630	external
https://www.cve.org/CVERecord?id=CVE-2025-43368	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43368	external
https://github.com/WebKit/WebKit/commit/674611789…	external
https://access.redhat.com/security/cve/CVE-2025-43419	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416326	external
https://www.cve.org/CVERecord?id=CVE-2025-43419	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43419	external
https://webkitgtk.org/security/WSA-2025-0008.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)\n\n* webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:17643",
        "url": "https://access.redhat.com/errata/RHSA-2025:17643"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2397626",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397626"
      },
      {
        "category": "external",
        "summary": "2397627",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397627"
      },
      {
        "category": "external",
        "summary": "2397628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397628"
      },
      {
        "category": "external",
        "summary": "2397630",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397630"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17643.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-06-30T13:38:27+00:00",
      "generator": {
        "date": "2026-06-30T13:38:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2025:17643",
      "initial_release_date": "2025-10-09T06:01:13+00:00",
      "revision_history": [
        {
          "date": "2025-10-09T06:01:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-10-09T06:01:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T13:38:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
                  "product_id": "AppStream-9.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.0::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_0.src",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_0.src",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_0?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_0?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_0?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_0?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_0?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_0?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_0?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_0.src",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31223",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T20:05:08.854000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31223",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31223",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-31277",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T20:06:11.785000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448780"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448780",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31277",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2026-03-20T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-43272",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-09-23T14:16:52.764000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43272",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43272",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2",
          "url": "https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2025-43342",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2025-09-23T14:22:01.761000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397627"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397627",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397627"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43342",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43342",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e",
          "url": "https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
    },
    {
      "cve": "CVE-2025-43356",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2025-09-23T14:24:33.860000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397628"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website can obtain access to sensor information without user consent due to improper handling of caches.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A website may be able to access sensor information without user consent",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397628",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397628"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43356",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43356",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4",
          "url": "https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A website may be able to access sensor information without user consent"
    },
    {
      "cve": "CVE-2025-43368",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-09-23T14:25:57.502000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397630"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397630",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397630"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43368",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43368",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a",
          "url": "https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2025-43419",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-11-21T12:41:22.388000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416326"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
          "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416326",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416326"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0008.html"
        }
      ],
      "release_date": "2025-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-09T06:01:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17643"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.src",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_0.x86_64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.aarch64",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.i686",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.ppc64le",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.s390x",
            "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    }
  ]
}

RHSA-2025:17741

Vulnerability from csaf_redhat - Published: 2025-10-13 01:44 - Updated: 2026-06-30 13:38

Summary

Red Hat Security Advisory: webkit2gtk3 security update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-31223

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-31277

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2025-43272

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43342

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43356

A flaw was found in WebKitGTK. A malicious website can obtain access to sensor information without user consent due to improper handling of caches.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2025-43368

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43419

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

43 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:17741	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397626	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397627	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397628	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397630	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-31223	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448779	external
https://www.cve.org/CVERecord?id=CVE-2025-31223	external
https://nvd.nist.gov/vuln/detail/CVE-2025-31223	external
https://webkitgtk.org/security/WSA-2026-0001.html	external
https://access.redhat.com/security/cve/CVE-2025-31277	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448780	external
https://www.cve.org/CVERecord?id=CVE-2025-31277	external
https://nvd.nist.gov/vuln/detail/CVE-2025-31277	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2025-43272	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397626	external
https://www.cve.org/CVERecord?id=CVE-2025-43272	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43272	external
https://github.com/WebKit/WebKit/commit/fa8541307…	external
https://webkitgtk.org/security/WSA-2025-0006.html	external
https://access.redhat.com/security/cve/CVE-2025-43342	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397627	external
https://www.cve.org/CVERecord?id=CVE-2025-43342	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43342	external
https://github.com/WebKit/WebKit/commit/f3f7e7880…	external
https://access.redhat.com/security/cve/CVE-2025-43356	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397628	external
https://www.cve.org/CVERecord?id=CVE-2025-43356	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43356	external
https://github.com/WebKit/WebKit/commit/fbe01734a…	external
https://access.redhat.com/security/cve/CVE-2025-43368	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397630	external
https://www.cve.org/CVERecord?id=CVE-2025-43368	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43368	external
https://github.com/WebKit/WebKit/commit/674611789…	external
https://access.redhat.com/security/cve/CVE-2025-43419	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416326	external
https://www.cve.org/CVERecord?id=CVE-2025-43419	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43419	external
https://webkitgtk.org/security/WSA-2025-0008.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)\n\n* webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:17741",
        "url": "https://access.redhat.com/errata/RHSA-2025:17741"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2397626",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397626"
      },
      {
        "category": "external",
        "summary": "2397627",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397627"
      },
      {
        "category": "external",
        "summary": "2397628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397628"
      },
      {
        "category": "external",
        "summary": "2397630",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397630"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17741.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-06-30T13:38:27+00:00",
      "generator": {
        "date": "2026-06-30T13:38:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2025:17741",
      "initial_release_date": "2025-10-13T01:44:23+00:00",
      "revision_history": [
        {
          "date": "2025-10-13T01:44:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-10-13T01:44:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T13:38:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_4.src",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_4.src",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_4?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_4?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_4?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_4.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31223",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T20:05:08.854000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31223",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31223",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-31277",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T20:06:11.785000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448780"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448780",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31277",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2026-03-20T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-43272",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-09-23T14:16:52.764000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43272",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43272",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2",
          "url": "https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2025-43342",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2025-09-23T14:22:01.761000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397627"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397627",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397627"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43342",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43342",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e",
          "url": "https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
    },
    {
      "cve": "CVE-2025-43356",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2025-09-23T14:24:33.860000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397628"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website can obtain access to sensor information without user consent due to improper handling of caches.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A website may be able to access sensor information without user consent",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397628",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397628"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43356",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43356",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4",
          "url": "https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A website may be able to access sensor information without user consent"
    },
    {
      "cve": "CVE-2025-43368",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-09-23T14:25:57.502000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397630"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397630",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397630"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43368",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43368",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a",
          "url": "https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2025-43419",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-11-21T12:41:22.388000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416326"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416326",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416326"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0008.html"
        }
      ],
      "release_date": "2025-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:44:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17741"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.src",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-debugsource-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.i686",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    }
  ]
}

RHSA-2025:17743

Vulnerability from csaf_redhat - Published: 2025-10-13 01:47 - Updated: 2026-06-30 13:38

Summary

Red Hat Security Advisory: webkit2gtk3 security update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-31223

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-31277

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2025-43272

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43342

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43356

A flaw was found in WebKitGTK. A malicious website can obtain access to sensor information without user consent due to improper handling of caches.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2025-43368

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43419

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

43 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:17743	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397626	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397627	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397628	external
https://bugzilla.redhat.com/show_bug.cgi?id=2397630	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-31223	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448779	external
https://www.cve.org/CVERecord?id=CVE-2025-31223	external
https://nvd.nist.gov/vuln/detail/CVE-2025-31223	external
https://webkitgtk.org/security/WSA-2026-0001.html	external
https://access.redhat.com/security/cve/CVE-2025-31277	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448780	external
https://www.cve.org/CVERecord?id=CVE-2025-31277	external
https://nvd.nist.gov/vuln/detail/CVE-2025-31277	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2025-43272	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397626	external
https://www.cve.org/CVERecord?id=CVE-2025-43272	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43272	external
https://github.com/WebKit/WebKit/commit/fa8541307…	external
https://webkitgtk.org/security/WSA-2025-0006.html	external
https://access.redhat.com/security/cve/CVE-2025-43342	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397627	external
https://www.cve.org/CVERecord?id=CVE-2025-43342	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43342	external
https://github.com/WebKit/WebKit/commit/f3f7e7880…	external
https://access.redhat.com/security/cve/CVE-2025-43356	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397628	external
https://www.cve.org/CVERecord?id=CVE-2025-43356	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43356	external
https://github.com/WebKit/WebKit/commit/fbe01734a…	external
https://access.redhat.com/security/cve/CVE-2025-43368	self
https://bugzilla.redhat.com/show_bug.cgi?id=2397630	external
https://www.cve.org/CVERecord?id=CVE-2025-43368	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43368	external
https://github.com/WebKit/WebKit/commit/674611789…	external
https://access.redhat.com/security/cve/CVE-2025-43419	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416326	external
https://www.cve.org/CVERecord?id=CVE-2025-43419	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43419	external
https://webkitgtk.org/security/WSA-2025-0008.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)\n\n* webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:17743",
        "url": "https://access.redhat.com/errata/RHSA-2025:17743"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2397626",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397626"
      },
      {
        "category": "external",
        "summary": "2397627",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397627"
      },
      {
        "category": "external",
        "summary": "2397628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397628"
      },
      {
        "category": "external",
        "summary": "2397630",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397630"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17743.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-06-30T13:38:29+00:00",
      "generator": {
        "date": "2026-06-30T13:38:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2025:17743",
      "initial_release_date": "2025-10-13T01:47:33+00:00",
      "revision_history": [
        {
          "date": "2025-10-13T01:47:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-10-13T01:47:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T13:38:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                  "product_id": "AppStream-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_2.src",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_2.src",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_2?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_2?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.50.0-2.el9_2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_2.src",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31223",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T20:05:08.854000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31223",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31223",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31223"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-31277",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T20:06:11.785000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448780"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448780",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-31277",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31277"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2026-03-20T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-43272",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-09-23T14:16:52.764000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43272",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43272",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43272"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2",
          "url": "https://github.com/WebKit/WebKit/commit/fa85413077accf8c881ff88684eb5dcc6ddebea2"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2025-43342",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2025-09-23T14:22:01.761000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397627"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397627",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397627"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43342",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43342",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43342"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e",
          "url": "https://github.com/WebKit/WebKit/commit/f3f7e7880c36ac7d0735efc084c618382194382e"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
    },
    {
      "cve": "CVE-2025-43356",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2025-09-23T14:24:33.860000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397628"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website can obtain access to sensor information without user consent due to improper handling of caches.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A website may be able to access sensor information without user consent",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397628",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397628"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43356",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43356",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43356"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4",
          "url": "https://github.com/WebKit/WebKit/commit/fbe01734a08b94759e2a1759bcf0ea1f279c95a4"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A website may be able to access sensor information without user consent"
    },
    {
      "cve": "CVE-2025-43368",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-09-23T14:25:57.502000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397630"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397630",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397630"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43368",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43368",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43368"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a",
          "url": "https://github.com/WebKit/WebKit/commit/674611789255a98f96b4504c7d04034e0ae5908a"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0006.html"
        }
      ],
      "release_date": "2025-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2025-43419",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-11-21T12:41:22.388000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416326"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
          "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416326",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416326"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43419"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0008.html"
        }
      ],
      "release_date": "2025-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-13T01:47:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17743"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.src",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-debugsource-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.50.0-2.el9_2.x86_64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.aarch64",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.i686",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.ppc64le",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.s390x",
            "AppStream-9.2.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.50.0-2.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-31277 (GCVE-0-2025-31277)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

Solutions

Solutions

Solutions

Solutions

Tags

Sightings

Nomenclature