ALSA-2026:74084

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:74084.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2026:74084
Related
Published
2026-09-30T00:00:00Z
Modified
2026-10-01T17:26:54Z
Summary
Critical: webkit2gtk3 security update
Details

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
  • chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
  • chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
  • chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
  • chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
  • chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-4464)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-4452)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
  • chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-5277)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-7340)
  • chromium-browser: Use after free in ANGLE (CVE-2026-7359)
  • chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354)
  • chromium-browser: Use after free in ANGLE (CVE-2026-7901)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-7903)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
  • chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)
  • chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)
  • chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)
  • chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)
  • chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9915)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9932)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9904)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-10018)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-9879)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9899)
  • chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9940)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-9965)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9877)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9946)
  • chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-9882)
  • chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-9910)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-9908)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9944)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-9953)
  • chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-9975)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9982)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-9914)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9941)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-10019)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9878)
  • chromium-browser: Use after free in ANGLE (CVE-2026-9901)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-9900)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-9969)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9935)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9911)
  • chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-9913)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9942)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)
  • chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-9916)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-11113)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-10889)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-10994)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)
  • chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)
  • chromium-browser: Integer overflow in ANGLE (CVE-2026-11088)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)
  • chromium-browser: Use after free in ANGLE (CVE-2026-10919)
  • chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-10999)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-11111)
  • chromium-browser: Type Confusion in ANGLE (CVE-2026-10955)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-10974)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11104)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11087)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)
  • chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-11191)
  • chromium-browser: Use after free in ANGLE (CVE-2026-11055)
  • chromium-browser: Out of bounds read and write in ANGLE (CVE-2026-10881)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-10930)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11005)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-10907)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11004)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-11040)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-10929)
  • chromium-browser: Use after free in ANGLE (CVE-2026-10913)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11090)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11268)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11044)
  • chromium-browser: Use after free in ANGLE (CVE-2026-11065)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-10977)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-10883)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11110)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-11043)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11123)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-10925)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11109)
  • chromium-browser: Use after free in ANGLE (CVE-2026-10914)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11138)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-11051)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-11061)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-10979)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11137)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-11066)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia (CVE-2026-10941)
  • chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia (CVE-2026-11099)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-11663)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11675)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-14044)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-13780)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-13841)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-13971)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-13820)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-14125)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-13885)
  • chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-13859)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-13781)
  • chromium-browser: Uninitialized Use in ANGLE (CVE-2026-13833)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-13834)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14152)
  • chromium-browser: Type Confusion in ANGLE (CVE-2026-13883)
  • chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-13877)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-13975)
  • chromium-browser: Out of bounds read in ANGLE (CVE-2026-13819)
  • chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-14400)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14414)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14389)
  • chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14396)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14401)
  • chromium-browser: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-14385)
  • chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14387)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-14390)
  • chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14388)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-14410)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-14419)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-14425)
  • chromium-browser: Out of bounds write in ANGLE (CVE-2026-14397)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-14398)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14418)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14382)
  • chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-14391)
  • chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14384)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14402)
  • chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14429)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14413)
  • chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-14427)
  • chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14411)
  • chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14386)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14412)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-15109)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
  • webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
  • webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
  • webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
  • webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
  • webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
  • webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
  • webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
  • webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
  • webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-15766)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-15774)
  • chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia (CVE-2026-16417)
  • chromium-browser: Chromium: Sandbox escape via out-of-bounds write in ANGLE (CVE-2026-16413)
  • chromium-browser: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access (CVE-2026-16419)
  • chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-17702)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17832)
  • chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17683)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17718)
  • chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17721)
  • chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17676)
  • chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17675)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17757)
  • chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17847)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17811)
  • chromium-browser: chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-17801)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17667)
  • chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia (CVE-2026-17914)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17704)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17750)
  • chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17691)
  • chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17701)
  • chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-17717)
  • chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17678)
  • chromium-browser: ANGLE: chromium-browser: Type Confusion in ANGLE (CVE-2026-17687)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17668)
  • chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17695)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-17745)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17740)
  • chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17655)
  • chromium-browser: skia: chromium-browser: skia: Race in Skia (CVE-2026-17712)
  • chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17771)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17790)
  • chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17891)
  • chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17677)
  • chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-17682)
  • chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17671)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17714)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17785)
  • chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-17653)
  • chromium-browser: chromium-browser: Type Confusion in ANGLE (CVE-2026-17697)
  • chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17689)
  • chromium-browser: skia: chromium-browser: Use after free in Skia (CVE-2026-19154)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-19173)
  • chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use (CVE-2026-19161)
  • chromium-browser: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android (CVE-2026-19157)
  • chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome (CVE-2026-19160)
  • chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
  • chromium-browser: skia: chromium-browser: skia: Information leak in Skia (CVE-2026-76041)
  • ANGLE: chromium-browser: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page (CVE-2026-76046)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
  • webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
  • webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
  • webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)
  • webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
  • webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
  • chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-78989)
  • ANGLE: chromium-browser: ANGLE: Arbitrary code execution via use-after-free vulnerability (CVE-2026-79149)
  • chromium-browser: skia: chromium-browser: Out of bounds read in Skia (CVE-2026-79112)
  • chromium-browser: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE (CVE-2026-79138)
  • chromium-browser: ANGLE: Arbitrary code execution via type confusion in crafted HTML (CVE-2026-78905)
  • chromium-browser: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource (CVE-2026-79120)
  • chromium-browser: Chromium: Information disclosure due to uninitialized resource in ANGLE (CVE-2026-79118)
  • chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via improper input validation (CVE-2026-79230)
  • chromium-browser: ANGLE: Arbitrary code execution via type confusion in crafted HTML page (CVE-2026-78904)
  • chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79240)
  • chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia (CVE-2026-78914)
  • chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome (CVE-2026-79147)
  • chromium-browser: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79019)
  • chromium-browser: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE (CVE-2026-79270)
  • chromium-browser: ANGLE: Arbitrary code execution via use after free (CVE-2026-79275)
  • chromium-browser: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-78978)
  • chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-78958)
  • chromium-browser: ANGLE: Information disclosure via uninitialized resource (CVE-2026-78965)
  • chromium-browser: Chromium ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79188)
  • chromium-browser: ANGLE: Remote code execution via crafted HTML page (CVE-2026-79043)
  • chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-79282)
  • chromium-browser: Chromium: Information disclosure via uninitialized resource in ANGLE (CVE-2026-79229)
  • chromium-browser: Chromium: Remote code execution via out-of-bounds write in ANGLE (CVE-2026-79131)
  • chromium-browser: Chromium: Web origin policy bypass via uninitialized resource in ANGLE (CVE-2026-79269)
  • chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79127)
  • chromium-browser: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79189)
  • chromium-browser: ANGLE: ANGLE: Arbitrary Code Execution via Crafted HTML Page (CVE-2026-79142)
  • chromium-browser: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-79048)
  • chromium-browser: ANGLE: Information disclosure via uninitialized resource (CVE-2026-79285)
  • chromium-browser: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79130)
  • chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-79144)
  • chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-79020)
  • chromium-browser: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing (CVE-2026-78906)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
  • webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
  • webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
  • webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)
  • webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / webkit2gtk3

Package

Name
webkit2gtk3
Purl
pkg:rpm/almalinux/webkit2gtk3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.54.0-1.el8_10

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:74084.json"

AlmaLinux:8 / webkit2gtk3-devel

Package

Name
webkit2gtk3-devel
Purl
pkg:rpm/almalinux/webkit2gtk3-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.54.0-1.el8_10

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:74084.json"

AlmaLinux:8 / webkit2gtk3-jsc

Package

Name
webkit2gtk3-jsc
Purl
pkg:rpm/almalinux/webkit2gtk3-jsc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.54.0-1.el8_10

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:74084.json"

AlmaLinux:8 / webkit2gtk3-jsc-devel

Package

Name
webkit2gtk3-jsc-devel
Purl
pkg:rpm/almalinux/webkit2gtk3-jsc-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.54.0-1.el8_10

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:74084.json"