RHSA-2026:69098

Vulnerability from csaf_redhat - Published: 2026-09-21 05:19 - Updated: 2026-09-22 14:59
Summary
Red Hat Security Advisory: webkit2gtk3 security update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376) * chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718) * webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351) * webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596) * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-19154

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=532941869

9.0 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686 —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64 —
Vendor Fix fix
Threats
Impact Important
CVE-2026-19161

A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data.

7.4 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CWE-824 - Access of Uninitialized Pointer
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-19173

An out of bounds write flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=538332338

9.0 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-19176

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment, potentially allowing further system compromise.

8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-28984

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-43795

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-43804

A flaw was found in WebKitGTK. Visiting a malicious website can cause an application denial of service due to improper state management.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-664 - Improper Control of a Resource Through its Lifetime
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-64713

A flaw was found in WebKitGTK. Visiting a website allows malicious web content to know if a user has visited a given link due to improper checks.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-64715

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64718

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64728

A flaw was found in WebKitGTK. Processing malicious web content can violate the iframe sandboxing policy due to improper validation.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-693 - Protection Mechanism Failure
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-64730

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CWE-451 - User Interface (UI) Misrepresentation of Critical Information
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-64753

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to a permissions issue.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-359 - Exposure of Private Personal Information to an Unauthorized Actor
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-64757

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64778

A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-64779

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-667 - Improper Locking
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64780

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper validation checks.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-20 - Improper Input Validation
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64782

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-667 - Improper Locking
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64783

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64784

A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-64787

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65331

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65332

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65334

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65335

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65336

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65337

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65338

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65340

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65341

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-65351

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-76041

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=540027341

7.4 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-79020

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514017820

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CWE-125 - Out-of-bounds Read
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
CVE-2026-84359

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514078656

6.8 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Moderate
CVE-2026-84635

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process termination due to improper state management.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-664 - Improper Control of a Resource Through its Lifetime
Affected products
Fixed 46 products, the same list as for CVE-2026-19154
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:69098 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2512231 external
https://bugzilla.redhat.com/show_bug.cgi?id=2512277 external
https://bugzilla.redhat.com/show_bug.cgi?id=2512287 external
https://bugzilla.redhat.com/show_bug.cgi?id=2512360 external
https://bugzilla.redhat.com/show_bug.cgi?id=2518263 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520315 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520316 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520317 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520319 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520320 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520321 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520322 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520323 external
https://bugzilla.redhat.com/show_bug.cgi?id=2521858 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524106 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524566 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524567 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524568 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524569 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524570 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524571 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524573 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524574 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524575 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524576 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524578 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524579 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524580 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524581 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524582 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524583 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524584 external
https://bugzilla.redhat.com/show_bug.cgi?id=2524585 external
https://bugzilla.redhat.com/show_bug.cgi?id=2526490 external
https://bugzilla.redhat.com/show_bug.cgi?id=2527168 external
https://bugzilla.redhat.com/show_bug.cgi?id=2535531 external
https://bugzilla.redhat.com/show_bug.cgi?id=2535532 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-19154 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512231 external
https://www.cve.org/CVERecord?id=CVE-2026-19154 external
https://nvd.nist.gov/vuln/detail/CVE-2026-19154 external
https://chromereleases.googleblog.com/2026/08/sta… external
https://issues.chromium.org/issues/532941869 external
https://access.redhat.com/security/cve/CVE-2026-19161 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512287 external
https://www.cve.org/CVERecord?id=CVE-2026-19161 external
https://nvd.nist.gov/vuln/detail/CVE-2026-19161 external
https://issues.chromium.org/issues/536165038 external
https://access.redhat.com/security/cve/CVE-2026-19173 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512277 external
https://www.cve.org/CVERecord?id=CVE-2026-19173 external
https://nvd.nist.gov/vuln/detail/CVE-2026-19173 external
https://issues.chromium.org/issues/538332338 external
https://access.redhat.com/security/cve/CVE-2026-19176 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512360 external
https://www.cve.org/CVERecord?id=CVE-2026-19176 external
https://nvd.nist.gov/vuln/detail/CVE-2026-19176 external
https://issues.chromium.org/issues/540157141 external
https://access.redhat.com/security/cve/CVE-2026-28984 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520315 external
https://www.cve.org/CVERecord?id=CVE-2026-28984 external
https://nvd.nist.gov/vuln/detail/CVE-2026-28984 external
https://webkitgtk.org/security/WSA-2026-0005.html external
https://access.redhat.com/security/cve/CVE-2026-43795 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524566 external
https://www.cve.org/CVERecord?id=CVE-2026-43795 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43795 external
https://support.apple.com/en-us/148281 external
https://support.apple.com/en-us/148282 external
https://support.apple.com/en-us/148286 external
https://support.apple.com/en-us/148287 external
https://access.redhat.com/security/cve/CVE-2026-43804 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520316 external
https://www.cve.org/CVERecord?id=CVE-2026-43804 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43804 external
https://access.redhat.com/security/cve/CVE-2026-64713 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520317 external
https://www.cve.org/CVERecord?id=CVE-2026-64713 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64713 external
https://access.redhat.com/security/cve/CVE-2026-64715 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524567 external
https://www.cve.org/CVERecord?id=CVE-2026-64715 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64715 external
https://access.redhat.com/security/cve/CVE-2026-64718 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524568 external
https://www.cve.org/CVERecord?id=CVE-2026-64718 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64718 external
https://support.apple.com/en-us/128066 external
https://support.apple.com/en-us/128067 external
https://support.apple.com/en-us/128068 external
https://support.apple.com/en-us/128069 external
https://support.apple.com/en-us/128070 external
https://support.apple.com/en-us/128073 external
https://access.redhat.com/security/cve/CVE-2026-64728 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520319 external
https://www.cve.org/CVERecord?id=CVE-2026-64728 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64728 external
https://access.redhat.com/security/cve/CVE-2026-64730 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520321 external
https://www.cve.org/CVERecord?id=CVE-2026-64730 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64730 external
https://access.redhat.com/security/cve/CVE-2026-64753 self
https://bugzilla.redhat.com/show_bug.cgi?id=2535532 external
https://www.cve.org/CVERecord?id=CVE-2026-64753 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64753 external
https://support.apple.com/en-us/149034 external
https://support.apple.com/en-us/149035 external
https://support.apple.com/en-us/149036 external
https://support.apple.com/en-us/149037 external
https://support.apple.com/en-us/149038 external
https://support.apple.com/en-us/149039 external
https://access.redhat.com/security/cve/CVE-2026-64757 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520322 external
https://www.cve.org/CVERecord?id=CVE-2026-64757 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64757 external
https://access.redhat.com/security/cve/CVE-2026-64778 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524569 external
https://www.cve.org/CVERecord?id=CVE-2026-64778 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64778 external
https://access.redhat.com/security/cve/CVE-2026-64779 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524570 external
https://www.cve.org/CVERecord?id=CVE-2026-64779 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64779 external
https://access.redhat.com/security/cve/CVE-2026-64780 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524571 external
https://www.cve.org/CVERecord?id=CVE-2026-64780 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64780 external
https://access.redhat.com/security/cve/CVE-2026-64782 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524573 external
https://www.cve.org/CVERecord?id=CVE-2026-64782 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64782 external
https://access.redhat.com/security/cve/CVE-2026-64783 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520323 external
https://www.cve.org/CVERecord?id=CVE-2026-64783 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64783 external
https://access.redhat.com/security/cve/CVE-2026-64784 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524574 external
https://www.cve.org/CVERecord?id=CVE-2026-64784 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64784 external
https://access.redhat.com/security/cve/CVE-2026-64787 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520320 external
https://www.cve.org/CVERecord?id=CVE-2026-64787 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64787 external
https://access.redhat.com/security/cve/CVE-2026-65331 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524575 external
https://www.cve.org/CVERecord?id=CVE-2026-65331 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65331 external
https://access.redhat.com/security/cve/CVE-2026-65332 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524576 external
https://www.cve.org/CVERecord?id=CVE-2026-65332 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65332 external
https://access.redhat.com/security/cve/CVE-2026-65334 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524578 external
https://www.cve.org/CVERecord?id=CVE-2026-65334 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65334 external
https://access.redhat.com/security/cve/CVE-2026-65335 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524579 external
https://www.cve.org/CVERecord?id=CVE-2026-65335 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65335 external
https://access.redhat.com/security/cve/CVE-2026-65336 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524580 external
https://www.cve.org/CVERecord?id=CVE-2026-65336 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65336 external
https://access.redhat.com/security/cve/CVE-2026-65337 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524581 external
https://www.cve.org/CVERecord?id=CVE-2026-65337 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65337 external
https://access.redhat.com/security/cve/CVE-2026-65338 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524582 external
https://www.cve.org/CVERecord?id=CVE-2026-65338 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65338 external
https://access.redhat.com/security/cve/CVE-2026-65340 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524583 external
https://www.cve.org/CVERecord?id=CVE-2026-65340 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65340 external
https://access.redhat.com/security/cve/CVE-2026-65341 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524584 external
https://www.cve.org/CVERecord?id=CVE-2026-65341 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65341 external
https://access.redhat.com/security/cve/CVE-2026-65351 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524585 external
https://www.cve.org/CVERecord?id=CVE-2026-65351 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65351 external
https://access.redhat.com/security/cve/CVE-2026-76041 self
https://bugzilla.redhat.com/show_bug.cgi?id=2518263 external
https://www.cve.org/CVERecord?id=CVE-2026-76041 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76041 external
https://chromereleases.googleblog.com/2026/08/sta… external
https://issues.chromium.org/issues/540027341 external
https://access.redhat.com/security/cve/CVE-2026-78376 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521858 external
https://www.cve.org/CVERecord?id=CVE-2026-78376 external
https://nvd.nist.gov/vuln/detail/CVE-2026-78376 external
https://github.com/WebKit/WebKit/pull/72142 external
https://access.redhat.com/security/cve/CVE-2026-79020 self
https://bugzilla.redhat.com/show_bug.cgi?id=2524106 external
https://www.cve.org/CVERecord?id=CVE-2026-79020 external
https://nvd.nist.gov/vuln/detail/CVE-2026-79020 external
https://chromereleases.googleblog.com/2026/08/sta… external
https://issues.chromium.org/issues/514017820 external
https://access.redhat.com/security/cve/CVE-2026-83596 self
https://bugzilla.redhat.com/show_bug.cgi?id=2526490 external
https://www.cve.org/CVERecord?id=CVE-2026-83596 external
https://nvd.nist.gov/vuln/detail/CVE-2026-83596 external
https://bugs.webkit.org/show_bug.cgi?id=322969 external
https://access.redhat.com/security/cve/CVE-2026-84359 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527168 external
https://www.cve.org/CVERecord?id=CVE-2026-84359 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84359 external
https://chromereleases.googleblog.com/2026/09/sta… external
https://issues.chromium.org/issues/514078656 external
https://access.redhat.com/security/cve/CVE-2026-84635 self
https://bugzilla.redhat.com/show_bug.cgi?id=2535531 external
https://www.cve.org/CVERecord?id=CVE-2026-84635 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84635 external
Acknowledgments
Igalia
Google Big Sleep
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)\n\n* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)\n\n* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)\n\n* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)\n\n* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)\n\n* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)\n\n* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)\n\n* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)\n\n* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)\n\n* webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)\n\n* chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)\n\n* webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)\n\n* webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)\n\n* chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)\n\n* webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:69098",
        "url": "https://access.redhat.com/errata/RHSA-2026:69098"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2512231",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512231"
      },
      {
        "category": "external",
        "summary": "2512277",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512277"
      },
      {
        "category": "external",
        "summary": "2512287",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512287"
      },
      {
        "category": "external",
        "summary": "2512360",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512360"
      },
      {
        "category": "external",
        "summary": "2518263",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518263"
      },
      {
        "category": "external",
        "summary": "2520315",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520315"
      },
      {
        "category": "external",
        "summary": "2520316",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520316"
      },
      {
        "category": "external",
        "summary": "2520317",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520317"
      },
      {
        "category": "external",
        "summary": "2520319",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520319"
      },
      {
        "category": "external",
        "summary": "2520320",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520320"
      },
      {
        "category": "external",
        "summary": "2520321",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520321"
      },
      {
        "category": "external",
        "summary": "2520322",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520322"
      },
      {
        "category": "external",
        "summary": "2520323",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520323"
      },
      {
        "category": "external",
        "summary": "2521858",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521858"
      },
      {
        "category": "external",
        "summary": "2524106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524106"
      },
      {
        "category": "external",
        "summary": "2524566",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524566"
      },
      {
        "category": "external",
        "summary": "2524567",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524567"
      },
      {
        "category": "external",
        "summary": "2524568",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524568"
      },
      {
        "category": "external",
        "summary": "2524569",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524569"
      },
      {
        "category": "external",
        "summary": "2524570",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524570"
      },
      {
        "category": "external",
        "summary": "2524571",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524571"
      },
      {
        "category": "external",
        "summary": "2524573",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524573"
      },
      {
        "category": "external",
        "summary": "2524574",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524574"
      },
      {
        "category": "external",
        "summary": "2524575",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524575"
      },
      {
        "category": "external",
        "summary": "2524576",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524576"
      },
      {
        "category": "external",
        "summary": "2524578",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524578"
      },
      {
        "category": "external",
        "summary": "2524579",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524579"
      },
      {
        "category": "external",
        "summary": "2524580",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524580"
      },
      {
        "category": "external",
        "summary": "2524581",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524581"
      },
      {
        "category": "external",
        "summary": "2524582",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524582"
      },
      {
        "category": "external",
        "summary": "2524583",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524583"
      },
      {
        "category": "external",
        "summary": "2524584",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524584"
      },
      {
        "category": "external",
        "summary": "2524585",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524585"
      },
      {
        "category": "external",
        "summary": "2526490",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526490"
      },
      {
        "category": "external",
        "summary": "2527168",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527168"
      },
      {
        "category": "external",
        "summary": "2535531",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535531"
      },
      {
        "category": "external",
        "summary": "2535532",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535532"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69098.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-09-22T14:59:35+00:00",
      "generator": {
        "date": "2026-09-22T14:59:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:69098",
      "initial_release_date": "2026-09-21T05:19:01+00:00",
      "revision_history": [
        {
          "date": "2026-09-21T05:19:01+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-21T05:19:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-22T14:59:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el9_8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.54.0-1.el9_8.src",
                "product": {
                  "name": "webkit2gtk3-0:2.54.0-1.el9_8.src",
                  "product_id": "webkit2gtk3-0:2.54.0-1.el9_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el9_8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el9_8?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el9_8?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el9_8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el9_8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.54.0-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src"
        },
        "product_reference": "webkit2gtk3-0:2.54.0-1.el9_8.src",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-19154",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-08-06T22:23:21.337345+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512231"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=532941869",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: Use after free in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19154"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512231",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512231"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19154",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19154"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19154",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19154"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
          "url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/532941869",
          "url": "https://issues.chromium.org/issues/532941869"
        }
      ],
      "release_date": "2026-08-06T20:33:39.289000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: Use after free in Skia"
    },
    {
      "cve": "CVE-2026-19161",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-08-06T22:26:55.493300+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512287"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19161"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512287",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512287"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19161",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19161"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19161",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19161"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
          "url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/536165038",
          "url": "https://issues.chromium.org/issues/536165038"
        }
      ],
      "release_date": "2026-08-06T20:33:51.773000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use"
    },
    {
      "cve": "CVE-2026-19173",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-08-06T22:26:17.163407+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out of bounds write flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=538332338",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19173"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19173",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19173"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19173",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19173"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
          "url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/538332338",
          "url": "https://issues.chromium.org/issues/538332338"
        }
      ],
      "release_date": "2026-08-06T20:33:55.259000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia"
    },
    {
      "cve": "CVE-2026-19176",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-08-06T22:31:32.901357+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512360"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment, potentially allowing further system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19176"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512360",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512360"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19176",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19176"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19176",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19176"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
          "url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/540157141",
          "url": "https://issues.chromium.org/issues/540157141"
        }
      ],
      "release_date": "2026-08-06T20:33:56.628000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page"
    },
    {
      "cve": "CVE-2026-28984",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-20T12:52:08.556000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520315"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-28984"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520315",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520315"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-28984",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-28984"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28984",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28984"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-43795",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:12:35.319013+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524566"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524566",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524566"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43795"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:31:14.573000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-43804",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-08-20T12:52:32.956000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520316"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Visiting a malicious website can cause an application denial of service due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a website may lead to an app denial-of-service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43804"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520316",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520316"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43804",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43804"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43804",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43804"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a website may lead to an app denial-of-service"
    },
    {
      "cve": "CVE-2026-64713",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2026-08-20T12:52:44.233000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520317"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Visiting a website allows malicious web content to know if a user has visited a given link due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Websites may know if the user has visited a given link",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64713"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520317",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520317"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64713",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64713"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64713",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64713"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Websites may know if the user has visited a given link"
    },
    {
      "cve": "CVE-2026-64715",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-08-26T17:12:39.011837+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524567"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64715"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524567",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524567"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64715",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64715"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64715",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64715"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:29:27.827000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
    },
    {
      "cve": "CVE-2026-64718",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-08-26T17:12:43.874456+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524568"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64718"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524568",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524568"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64718",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64718"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64718",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64718"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/128066",
          "url": "https://support.apple.com/en-us/128066"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/128067",
          "url": "https://support.apple.com/en-us/128067"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/128068",
          "url": "https://support.apple.com/en-us/128068"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/128069",
          "url": "https://support.apple.com/en-us/128069"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/128070",
          "url": "https://support.apple.com/en-us/128070"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/128073",
          "url": "https://support.apple.com/en-us/128073"
        }
      ],
      "release_date": "2026-07-27T20:12:07.210000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64728",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "discovery_date": "2026-08-20T12:53:05.503000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520319"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can violate the iframe sandboxing policy due to improper validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64728"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520319",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520319"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64728",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64728"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64728",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64728"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy"
    },
    {
      "cve": "CVE-2026-64730",
      "cwe": {
        "id": "CWE-451",
        "name": "User Interface (UI) Misrepresentation of Critical Information"
      },
      "discovery_date": "2026-08-20T12:53:15.786000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520321"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64730"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520321",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520321"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64730",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64730"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64730",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64730"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing"
    },
    {
      "cve": "CVE-2026-64753",
      "cwe": {
        "id": "CWE-359",
        "name": "Exposure of Private Personal Information to an Unauthorized Actor"
      },
      "discovery_date": "2026-09-16T16:06:29.943285+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535532"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to a permissions issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may disclose sensitive user information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64753"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535532",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535532"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64753",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64753"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64753",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64753"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/149034",
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/149035",
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/149036",
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/149037",
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/149038",
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/149039",
          "url": "https://support.apple.com/en-us/149039"
        }
      ],
      "release_date": "2026-09-14T20:48:40.978000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may disclose sensitive user information"
    },
    {
      "cve": "CVE-2026-64757",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-20T13:04:44.130000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520322"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64757"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520322",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520322"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64757",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64757"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64757",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64757"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64778",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2026-08-26T17:12:48.176337+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524569"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a maliciously crafted website may leak sensitive data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. For this reason, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524569",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524569"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64778"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:29:37.539000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a maliciously crafted website may leak sensitive data"
    },
    {
      "cve": "CVE-2026-64779",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "discovery_date": "2026-08-26T17:12:52.055145+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524570"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64779"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524570",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524570"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64779"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:29:15.067000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64780",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2026-08-26T17:12:58.111219+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524571"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper validation checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524571",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524571"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64780"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:29:17.121000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64782",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "discovery_date": "2026-08-26T17:13:07.511483+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524573"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64782"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524573",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524573"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64782",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64782"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64782",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64782"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:31:21.710000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64783",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-08-20T12:53:37.256000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520323"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64783"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520323",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520323"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64783",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64783"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64783",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64783"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64784",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:12.298023+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524574"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64784"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524574",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524574"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64784",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64784"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64784",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64784"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:30:45.212000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-64787",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-08-20T12:53:49.325000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520320"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process termination but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64787"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520320",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520320"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64787",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64787",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64787"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0005.html"
        }
      ],
      "release_date": "2026-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination"
    },
    {
      "cve": "CVE-2026-65331",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:17.831776+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524575"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65331"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524575",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524575"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65331",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65331"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65331",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65331"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:31:37.955000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65332",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:23.101445+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524576"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524576",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524576"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65332"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:29:09.891000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65334",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:34.553047+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524578"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65334"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524578",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524578"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65334",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65334"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65334",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65334"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:30:08.305000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65335",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:40.507496+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65335"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65335",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65335"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65335",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65335"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:30:18.797000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65336",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:44.936967+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65336"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65336",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65336"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65336",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65336"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:30:49.391000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65337",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:50.462881+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524581"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65337"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524581",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524581"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65337",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65337"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65337",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65337"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:31:00.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65338",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:13:57.861431+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65338"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65338",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65338"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65338",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65338"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:29:59.913000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65340",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:14:02.244999+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524583"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65340"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524583",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524583"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65340",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65340"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65340",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65340"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:31:03.232000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-65341",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:14:07.755730+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524584"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65341"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524584",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524584"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65341",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65341"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65341",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65341"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148287",
          "url": "https://support.apple.com/en-us/148287"
        }
      ],
      "release_date": "2026-08-17T21:30:42.172000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2026-65351",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-26T17:14:12.976874+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524585"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65351"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524585",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524585"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65351",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65351"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65351",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65351"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148281",
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148282",
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/148286",
          "url": "https://support.apple.com/en-us/148286"
        }
      ],
      "release_date": "2026-08-17T21:31:25.582000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
    },
    {
      "cve": "CVE-2026-76041",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-08-18T20:51:10.690383+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2518263"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=540027341",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: skia: Information leak in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76041"
        },
        {
          "category": "external",
          "summary": "RHBZ#2518263",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518263"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76041",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76041"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76041",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76041"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html",
          "url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/540027341",
          "url": "https://issues.chromium.org/issues/540027341"
        }
      ],
      "release_date": "2026-08-18T20:31:28.156000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Avoid visiting untrusted websites or opening untrusted HTML content. Users should exercise caution when browsing the internet and only access reputable sources to reduce the risk of exploitation.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: skia: Information leak in Skia"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Igalia"
          ]
        }
      ],
      "cve": "CVE-2026-78376",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-08-24T13:01:28.703000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free of JSCValue function parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78376"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78376"
        },
        {
          "category": "external",
          "summary": "https://github.com/WebKit/WebKit/pull/72142",
          "url": "https://github.com/WebKit/WebKit/pull/72142"
        }
      ],
      "release_date": "2026-08-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: use-after-free of JSCValue function parameters"
    },
    {
      "cve": "CVE-2026-79020",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-08-25T21:06:18.343107+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2524106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514017820",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-79020"
        },
        {
          "category": "external",
          "summary": "RHBZ#2524106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-79020",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79020"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-79020",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79020"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
          "url": "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/514017820",
          "url": "https://issues.chromium.org/issues/514017820"
        }
      ],
      "release_date": "2026-08-25T20:10:29.472000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Google Big Sleep"
          ]
        }
      ],
      "cve": "CVE-2026-83596",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-31T19:57:48.998000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2526490"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-83596"
        },
        {
          "category": "external",
          "summary": "RHBZ#2526490",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526490"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-83596",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-83596"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83596",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83596"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=322969",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=322969"
        }
      ],
      "release_date": "2026-08-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature"
    },
    {
      "cve": "CVE-2026-84359",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-09-01T23:51:27.299163+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514078656",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: skia: chromium-browser: Information leak in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84359"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84359",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84359"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84359",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84359"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop.html"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/514078656",
          "url": "https://issues.chromium.org/issues/514078656"
        }
      ],
      "release_date": "2026-09-01T23:42:26.066000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: skia: chromium-browser: Information leak in Skia"
    },
    {
      "cve": "CVE-2026-84635",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535531"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process termination due to improper state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process termination but the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84635"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535531",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535531"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84635",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84635"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84635",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84635"
        }
      ],
      "release_date": "2026-09-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T05:19:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69098"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.