RHSA-2026:74084
Vulnerability from csaf_opensuse - Published: 2026-09-30 00:00 - Updated: 2026-10-04 11:00Summary
security update for webkit2gtk3
Severity
Critical
Notes
Title of the patch: security update for webkit2gtk3
Description of the patch: This security update provides a functional equivalent of RHSA-2026:74084.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:74084.
Patchnames: RHSA-2026:74084
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9.6 (Critical)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.3 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
9.6 (Critical)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
not set
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
9.6 (Critical)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
9.6 (Critical)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
9.6 (Critical)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
7.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
7.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
moderate
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.3 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
8.3 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
Affected products
Recommended
8 products, the same list as for
CVE-2023-4860
Threats
Impact
critical
References
920 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for webkit2gtk3",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:74084.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:74084.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:74084",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_74084.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4860 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7966 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8193 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-9123 page",
"url": "https://www.suse.com/security/cve/CVE-2024-9123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-0436 page",
"url": "https://www.suse.com/security/cve/CVE-2025-0436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-0444 page",
"url": "https://www.suse.com/security/cve/CVE-2025-0444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-10502 page",
"url": "https://www.suse.com/security/cve/CVE-2025-10502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-8901 page",
"url": "https://www.suse.com/security/cve/CVE-2025-8901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-9478 page",
"url": "https://www.suse.com/security/cve/CVE-2025-9478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-0908 page",
"url": "https://www.suse.com/security/cve/CVE-2026-0908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10009 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10011 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10012 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10018 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10019 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10020 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10881 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10883 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10889 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10907 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10913 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10919 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10925 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10925/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10929 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10930 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10955 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10977 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10979 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10985 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10993 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10993/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10994 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-10999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-10999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11004 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11005 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11024 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11039 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11040 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11044 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11051 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11055 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11057 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11061 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11065 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11066 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11087 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11088 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11090 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11099 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11104 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11109 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11110 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11111 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11113 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11123 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11124 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11137 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11138 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11159 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11191 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11268 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11268/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11663 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11675 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13780 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13781 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13819 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13820 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13833 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13841 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13859 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13877 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13883 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13885 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13975 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14044 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14125 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14152 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14382 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14384 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14384/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14385 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14386 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14387 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14389 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14390 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14391 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14396 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14397 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14398 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14400 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14401 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14410 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14411 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14412 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14413 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14414 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14418 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14419 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14425 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14427 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15109 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15774 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16413 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16417 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16419 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17653 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17655 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17667 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17668 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17668/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17671 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17671/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17675 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17676 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17677 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17678 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17682 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17682/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17683 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17687 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17689 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17689/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17691 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17695 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17697 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17697/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17701 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17702 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17704 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17712 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17714 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17717 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17718 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17721 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17740 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17745 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17750 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17757 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17771 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17785 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17790 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17801 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17811 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17847 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17891 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19154 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19157 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19160 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19161 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19173 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19176 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3536 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3538 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3909 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3931 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39872 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43663 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43676 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43699 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43699/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43701 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43707 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43712 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43713 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43715 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43716 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43720 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43721 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43725 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43726 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43727 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43731 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43731/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43732 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43734 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43740 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43742 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43745 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43795 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43804 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4448 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4452 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4460 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4464 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5275 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5275/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5277 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5277/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5283 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5868 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5870 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5879 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6296 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6298 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6364 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64713 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64715 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64718 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64728 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64730 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64753 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64757 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64778 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64779 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64780 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64782 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64783 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64784 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64787 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65331 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65331/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65332 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65333/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65334 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65334/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65335 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65335/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65336 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65337 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65337/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65338 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65340 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65341 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65351 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65351/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7340 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7353 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7354 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7359 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-76041 page",
"url": "https://www.suse.com/security/cve/CVE-2026-76041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-76046 page",
"url": "https://www.suse.com/security/cve/CVE-2026-76046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78376 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78905 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78906 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78958 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78978 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78989 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7900 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7901 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79019 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79020 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7903 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79048 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79112 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79118 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79120 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79127 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79130 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79131 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79138 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79142 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79144 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79149 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79188 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79189 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7920 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7920/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79229 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7923 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79230 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79240 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79269 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79270 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79275 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79275/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79282 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-79285 page",
"url": "https://www.suse.com/security/cve/CVE-2026-79285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7949 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-83596 page",
"url": "https://www.suse.com/security/cve/CVE-2026-83596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84635 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8510 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8519 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8525 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8554 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8556 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8579 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9877 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9878 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9879 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9882 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9892 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9893 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9899 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9900 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9901 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9908 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9909 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9910 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9911 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9913 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9915 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9916 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9923 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9924 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9925 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9925/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9926 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9927 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9928 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9932 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9944 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9969 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9975 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9983 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9998 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9999/"
}
],
"title": "security update for webkit2gtk3",
"tracking": {
"current_release_date": "2026-10-04T11:00:31Z",
"generator": {
"date": "2026-09-30T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:74084",
"initial_release_date": "2026-09-30T00:00:00Z",
"revision_history": [
{
"date": "2026-09-30T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-04T11:00:31Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.54.0-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-0:2.54.0-1.el8_10.i686",
"product_id": "webkit2gtk3-0:2.54.0-1.el8_10.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:webkitgtk:webkitgtk:2.54.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/webkit2gtk3@2.54.0-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"product_id": "webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:webkitgtk:webkitgtk:2.54.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/webkit2gtk3-devel@2.54.0-1.el8_10?arch=i686\u0026upstream=webkit2gtk3-0:2.54.0-1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"product_id": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/webkit2gtk3-jsc@2.54.0-1.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/webkit2gtk3-jsc-devel@2.54.0-1.el8_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"product_id": "webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:webkitgtk:webkitgtk:2.54.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/webkit2gtk3@2.54.0-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"product_id": "webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:webkitgtk:webkitgtk:2.54.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/webkit2gtk3-devel@2.54.0-1.el8_10?arch=x86_64\u0026upstream=webkit2gtk3-0:2.54.0-1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/webkit2gtk3-jsc@2.54.0-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/webkit2gtk3-jsc-devel@2.54.0-1.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.54.0-1.el8_10.i686 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-0:2.54.0-1.el8_10.i686",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.54.0-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.54.0-1.el8_10.i686 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-4860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4860"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4860",
"url": "https://www.suse.com/security/cve/CVE-2023-4860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-4860"
},
{
"cve": "CVE-2024-7532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7532"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7532",
"url": "https://www.suse.com/security/cve/CVE-2024-7532"
},
{
"category": "external",
"summary": "SUSE Bug 1228941 for CVE-2024-7532",
"url": "https://bugzilla.suse.com/1228941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2024-7532"
},
{
"cve": "CVE-2024-7966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7966"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7966",
"url": "https://www.suse.com/security/cve/CVE-2024-7966"
},
{
"category": "external",
"summary": "SUSE Bug 1229591 for CVE-2024-7966",
"url": "https://bugzilla.suse.com/1229591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2024-7966"
},
{
"cve": "CVE-2024-8193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8193"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8193",
"url": "https://www.suse.com/security/cve/CVE-2024-8193"
},
{
"category": "external",
"summary": "SUSE Bug 1229897 for CVE-2024-8193",
"url": "https://bugzilla.suse.com/1229897"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-8193"
},
{
"cve": "CVE-2024-8198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8198"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8198",
"url": "https://www.suse.com/security/cve/CVE-2024-8198"
},
{
"category": "external",
"summary": "SUSE Bug 1229897 for CVE-2024-8198",
"url": "https://bugzilla.suse.com/1229897"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-8198"
},
{
"cve": "CVE-2024-8636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8636"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8636",
"url": "https://www.suse.com/security/cve/CVE-2024-8636"
},
{
"category": "external",
"summary": "SUSE Bug 1230391 for CVE-2024-8636",
"url": "https://bugzilla.suse.com/1230391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-8636"
},
{
"cve": "CVE-2024-9123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-9123"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-9123",
"url": "https://www.suse.com/security/cve/CVE-2024-9123"
},
{
"category": "external",
"summary": "SUSE Bug 1230964 for CVE-2024-9123",
"url": "https://bugzilla.suse.com/1230964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-9123"
},
{
"cve": "CVE-2025-0436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-0436"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-0436",
"url": "https://www.suse.com/security/cve/CVE-2025-0436"
},
{
"category": "external",
"summary": "SUSE Bug 1235892 for CVE-2025-0436",
"url": "https://bugzilla.suse.com/1235892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-0436"
},
{
"cve": "CVE-2025-0444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-0444"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-0444",
"url": "https://www.suse.com/security/cve/CVE-2025-0444"
},
{
"category": "external",
"summary": "SUSE Bug 1236806 for CVE-2025-0444",
"url": "https://bugzilla.suse.com/1236806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-0444"
},
{
"cve": "CVE-2025-10502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-10502"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-10502",
"url": "https://www.suse.com/security/cve/CVE-2025-10502"
},
{
"category": "external",
"summary": "SUSE Bug 1249999 for CVE-2025-10502",
"url": "https://bugzilla.suse.com/1249999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2025-10502"
},
{
"cve": "CVE-2025-8901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-8901"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-8901",
"url": "https://www.suse.com/security/cve/CVE-2025-8901"
},
{
"category": "external",
"summary": "SUSE Bug 1247981 for CVE-2025-8901",
"url": "https://bugzilla.suse.com/1247981"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-8901"
},
{
"cve": "CVE-2025-9478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-9478"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-9478",
"url": "https://www.suse.com/security/cve/CVE-2025-9478"
},
{
"category": "external",
"summary": "SUSE Bug 1248769 for CVE-2025-9478",
"url": "https://bugzilla.suse.com/1248769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-9478"
},
{
"cve": "CVE-2026-0908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-0908"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-0908",
"url": "https://www.suse.com/security/cve/CVE-2026-0908"
},
{
"category": "external",
"summary": "SUSE Bug 1256614 for CVE-2026-0908",
"url": "https://bugzilla.suse.com/1256614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-0908"
},
{
"cve": "CVE-2026-10009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10009"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10009",
"url": "https://www.suse.com/security/cve/CVE-2026-10009"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-10009",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10009"
},
{
"cve": "CVE-2026-10011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10011"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10011",
"url": "https://www.suse.com/security/cve/CVE-2026-10011"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-10011",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10011"
},
{
"cve": "CVE-2026-10012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10012"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10012",
"url": "https://www.suse.com/security/cve/CVE-2026-10012"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-10012",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10012"
},
{
"cve": "CVE-2026-10018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10018"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10018",
"url": "https://www.suse.com/security/cve/CVE-2026-10018"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-10018",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10018"
},
{
"cve": "CVE-2026-10019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10019"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10019",
"url": "https://www.suse.com/security/cve/CVE-2026-10019"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-10019",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10019"
},
{
"cve": "CVE-2026-10020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10020"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10020",
"url": "https://www.suse.com/security/cve/CVE-2026-10020"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-10020",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10020"
},
{
"cve": "CVE-2026-10881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10881"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10881",
"url": "https://www.suse.com/security/cve/CVE-2026-10881"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10881"
},
{
"cve": "CVE-2026-10883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10883"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10883",
"url": "https://www.suse.com/security/cve/CVE-2026-10883"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10883"
},
{
"cve": "CVE-2026-10889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10889"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10889",
"url": "https://www.suse.com/security/cve/CVE-2026-10889"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10889"
},
{
"cve": "CVE-2026-10907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10907"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10907",
"url": "https://www.suse.com/security/cve/CVE-2026-10907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10907"
},
{
"cve": "CVE-2026-10913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10913"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10913",
"url": "https://www.suse.com/security/cve/CVE-2026-10913"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10913"
},
{
"cve": "CVE-2026-10914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10914"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10914",
"url": "https://www.suse.com/security/cve/CVE-2026-10914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10914"
},
{
"cve": "CVE-2026-10919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10919"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10919",
"url": "https://www.suse.com/security/cve/CVE-2026-10919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10919"
},
{
"cve": "CVE-2026-10925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10925"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10925",
"url": "https://www.suse.com/security/cve/CVE-2026-10925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10925"
},
{
"cve": "CVE-2026-10929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10929"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10929",
"url": "https://www.suse.com/security/cve/CVE-2026-10929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10929"
},
{
"cve": "CVE-2026-10930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10930"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10930",
"url": "https://www.suse.com/security/cve/CVE-2026-10930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10930"
},
{
"cve": "CVE-2026-10941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10941"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10941",
"url": "https://www.suse.com/security/cve/CVE-2026-10941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10941"
},
{
"cve": "CVE-2026-10955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10955"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10955",
"url": "https://www.suse.com/security/cve/CVE-2026-10955"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-10955"
},
{
"cve": "CVE-2026-10974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10974"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10974",
"url": "https://www.suse.com/security/cve/CVE-2026-10974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-10974"
},
{
"cve": "CVE-2026-10977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10977"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10977",
"url": "https://www.suse.com/security/cve/CVE-2026-10977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-10977"
},
{
"cve": "CVE-2026-10979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10979"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10979",
"url": "https://www.suse.com/security/cve/CVE-2026-10979"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-10979"
},
{
"cve": "CVE-2026-10985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10985"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10985",
"url": "https://www.suse.com/security/cve/CVE-2026-10985"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-10985"
},
{
"cve": "CVE-2026-10993",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10993"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10993",
"url": "https://www.suse.com/security/cve/CVE-2026-10993"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-10993"
},
{
"cve": "CVE-2026-10994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10994"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10994",
"url": "https://www.suse.com/security/cve/CVE-2026-10994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "not set"
}
],
"title": "CVE-2026-10994"
},
{
"cve": "CVE-2026-10999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-10999"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-10999",
"url": "https://www.suse.com/security/cve/CVE-2026-10999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-10999"
},
{
"cve": "CVE-2026-11004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11004"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11004",
"url": "https://www.suse.com/security/cve/CVE-2026-11004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11004"
},
{
"cve": "CVE-2026-11005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11005"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11005",
"url": "https://www.suse.com/security/cve/CVE-2026-11005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11005"
},
{
"cve": "CVE-2026-11024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11024"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11024",
"url": "https://www.suse.com/security/cve/CVE-2026-11024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-11024"
},
{
"cve": "CVE-2026-11039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11039"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11039",
"url": "https://www.suse.com/security/cve/CVE-2026-11039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11039"
},
{
"cve": "CVE-2026-11040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11040"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11040",
"url": "https://www.suse.com/security/cve/CVE-2026-11040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-11040"
},
{
"cve": "CVE-2026-11043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11043"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11043",
"url": "https://www.suse.com/security/cve/CVE-2026-11043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11043"
},
{
"cve": "CVE-2026-11044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11044"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11044",
"url": "https://www.suse.com/security/cve/CVE-2026-11044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11044"
},
{
"cve": "CVE-2026-11051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11051"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11051",
"url": "https://www.suse.com/security/cve/CVE-2026-11051"
},
{
"category": "external",
"summary": "SUSE Bug 1267706 for CVE-2026-11051",
"url": "https://bugzilla.suse.com/1267706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11051"
},
{
"cve": "CVE-2026-11055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11055"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11055",
"url": "https://www.suse.com/security/cve/CVE-2026-11055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-11055"
},
{
"cve": "CVE-2026-11057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11057"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11057",
"url": "https://www.suse.com/security/cve/CVE-2026-11057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11057"
},
{
"cve": "CVE-2026-11061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11061"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11061",
"url": "https://www.suse.com/security/cve/CVE-2026-11061"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11061"
},
{
"cve": "CVE-2026-11065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11065"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11065",
"url": "https://www.suse.com/security/cve/CVE-2026-11065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11065"
},
{
"cve": "CVE-2026-11066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11066"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11066",
"url": "https://www.suse.com/security/cve/CVE-2026-11066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11066"
},
{
"cve": "CVE-2026-11087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11087"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11087",
"url": "https://www.suse.com/security/cve/CVE-2026-11087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11087"
},
{
"cve": "CVE-2026-11088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11088"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11088",
"url": "https://www.suse.com/security/cve/CVE-2026-11088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11088"
},
{
"cve": "CVE-2026-11090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11090"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11090",
"url": "https://www.suse.com/security/cve/CVE-2026-11090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11090"
},
{
"cve": "CVE-2026-11099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11099"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11099",
"url": "https://www.suse.com/security/cve/CVE-2026-11099"
},
{
"category": "external",
"summary": "SUSE Bug 1267706 for CVE-2026-11099",
"url": "https://bugzilla.suse.com/1267706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11099"
},
{
"cve": "CVE-2026-11104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11104"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11104",
"url": "https://www.suse.com/security/cve/CVE-2026-11104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11104"
},
{
"cve": "CVE-2026-11109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11109"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11109",
"url": "https://www.suse.com/security/cve/CVE-2026-11109"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11109"
},
{
"cve": "CVE-2026-11110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11110"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11110",
"url": "https://www.suse.com/security/cve/CVE-2026-11110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11110"
},
{
"cve": "CVE-2026-11111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11111"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11111",
"url": "https://www.suse.com/security/cve/CVE-2026-11111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-11111"
},
{
"cve": "CVE-2026-11113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11113"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11113",
"url": "https://www.suse.com/security/cve/CVE-2026-11113"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11113"
},
{
"cve": "CVE-2026-11121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11121"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11121",
"url": "https://www.suse.com/security/cve/CVE-2026-11121"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11121"
},
{
"cve": "CVE-2026-11123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11123"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11123",
"url": "https://www.suse.com/security/cve/CVE-2026-11123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11123"
},
{
"cve": "CVE-2026-11124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11124"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11124",
"url": "https://www.suse.com/security/cve/CVE-2026-11124"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-11124"
},
{
"cve": "CVE-2026-11137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11137"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11137",
"url": "https://www.suse.com/security/cve/CVE-2026-11137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11137"
},
{
"cve": "CVE-2026-11138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11138"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11138",
"url": "https://www.suse.com/security/cve/CVE-2026-11138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11138"
},
{
"cve": "CVE-2026-11159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11159"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11159",
"url": "https://www.suse.com/security/cve/CVE-2026-11159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11159"
},
{
"cve": "CVE-2026-11191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11191"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11191",
"url": "https://www.suse.com/security/cve/CVE-2026-11191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-11191"
},
{
"cve": "CVE-2026-11268",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11268"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11268",
"url": "https://www.suse.com/security/cve/CVE-2026-11268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-11268"
},
{
"cve": "CVE-2026-11663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11663"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11663",
"url": "https://www.suse.com/security/cve/CVE-2026-11663"
},
{
"category": "external",
"summary": "SUSE Bug 1267911 for CVE-2026-11663",
"url": "https://bugzilla.suse.com/1267911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11663"
},
{
"cve": "CVE-2026-11675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11675"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11675",
"url": "https://www.suse.com/security/cve/CVE-2026-11675"
},
{
"category": "external",
"summary": "SUSE Bug 1267911 for CVE-2026-11675",
"url": "https://bugzilla.suse.com/1267911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-11675"
},
{
"cve": "CVE-2026-13780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13780"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13780",
"url": "https://www.suse.com/security/cve/CVE-2026-13780"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13780",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13780"
},
{
"cve": "CVE-2026-13781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13781"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13781",
"url": "https://www.suse.com/security/cve/CVE-2026-13781"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13781",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13781"
},
{
"cve": "CVE-2026-13819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13819"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13819",
"url": "https://www.suse.com/security/cve/CVE-2026-13819"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13819",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13819"
},
{
"cve": "CVE-2026-13820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13820"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13820",
"url": "https://www.suse.com/security/cve/CVE-2026-13820"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13820",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13820"
},
{
"cve": "CVE-2026-13833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13833"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13833",
"url": "https://www.suse.com/security/cve/CVE-2026-13833"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13833",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13833"
},
{
"cve": "CVE-2026-13834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13834"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13834",
"url": "https://www.suse.com/security/cve/CVE-2026-13834"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13834",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13834"
},
{
"cve": "CVE-2026-13841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13841"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13841",
"url": "https://www.suse.com/security/cve/CVE-2026-13841"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13841",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13841"
},
{
"cve": "CVE-2026-13859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13859"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13859",
"url": "https://www.suse.com/security/cve/CVE-2026-13859"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13859",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13859"
},
{
"cve": "CVE-2026-13877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13877"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13877",
"url": "https://www.suse.com/security/cve/CVE-2026-13877"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13877",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13877"
},
{
"cve": "CVE-2026-13883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13883"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13883",
"url": "https://www.suse.com/security/cve/CVE-2026-13883"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13883",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13883"
},
{
"cve": "CVE-2026-13885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13885"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13885",
"url": "https://www.suse.com/security/cve/CVE-2026-13885"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13885",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13885"
},
{
"cve": "CVE-2026-13971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13971"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13971",
"url": "https://www.suse.com/security/cve/CVE-2026-13971"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13971",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13971"
},
{
"cve": "CVE-2026-13975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13975"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13975",
"url": "https://www.suse.com/security/cve/CVE-2026-13975"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-13975",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-13975"
},
{
"cve": "CVE-2026-14044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14044"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14044",
"url": "https://www.suse.com/security/cve/CVE-2026-14044"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14044",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14044"
},
{
"cve": "CVE-2026-14125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14125"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14125",
"url": "https://www.suse.com/security/cve/CVE-2026-14125"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14125",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14125"
},
{
"cve": "CVE-2026-14152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14152"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14152",
"url": "https://www.suse.com/security/cve/CVE-2026-14152"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14152",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14152"
},
{
"cve": "CVE-2026-14382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14382"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14382",
"url": "https://www.suse.com/security/cve/CVE-2026-14382"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14382",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14382"
},
{
"cve": "CVE-2026-14384",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14384"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14384",
"url": "https://www.suse.com/security/cve/CVE-2026-14384"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14384",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14384"
},
{
"cve": "CVE-2026-14385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14385"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14385",
"url": "https://www.suse.com/security/cve/CVE-2026-14385"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14385",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14385"
},
{
"cve": "CVE-2026-14386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14386"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14386",
"url": "https://www.suse.com/security/cve/CVE-2026-14386"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14386",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14386"
},
{
"cve": "CVE-2026-14387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14387"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14387",
"url": "https://www.suse.com/security/cve/CVE-2026-14387"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14387",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14387"
},
{
"cve": "CVE-2026-14388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14388"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14388",
"url": "https://www.suse.com/security/cve/CVE-2026-14388"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14388",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14388"
},
{
"cve": "CVE-2026-14389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14389"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14389",
"url": "https://www.suse.com/security/cve/CVE-2026-14389"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14389",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14389"
},
{
"cve": "CVE-2026-14390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14390"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14390",
"url": "https://www.suse.com/security/cve/CVE-2026-14390"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14390",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14390"
},
{
"cve": "CVE-2026-14391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14391"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14391",
"url": "https://www.suse.com/security/cve/CVE-2026-14391"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14391",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14391"
},
{
"cve": "CVE-2026-14396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14396"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14396",
"url": "https://www.suse.com/security/cve/CVE-2026-14396"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14396",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14396"
},
{
"cve": "CVE-2026-14397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14397"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14397",
"url": "https://www.suse.com/security/cve/CVE-2026-14397"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14397",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14397"
},
{
"cve": "CVE-2026-14398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14398"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14398",
"url": "https://www.suse.com/security/cve/CVE-2026-14398"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14398",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14398"
},
{
"cve": "CVE-2026-14400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14400"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14400",
"url": "https://www.suse.com/security/cve/CVE-2026-14400"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14400",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14400"
},
{
"cve": "CVE-2026-14401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14401"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14401",
"url": "https://www.suse.com/security/cve/CVE-2026-14401"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14401",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14401"
},
{
"cve": "CVE-2026-14402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14402"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14402",
"url": "https://www.suse.com/security/cve/CVE-2026-14402"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14402",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14402"
},
{
"cve": "CVE-2026-14410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14410"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14410",
"url": "https://www.suse.com/security/cve/CVE-2026-14410"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14410",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14410"
},
{
"cve": "CVE-2026-14411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14411"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14411",
"url": "https://www.suse.com/security/cve/CVE-2026-14411"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14411",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14411"
},
{
"cve": "CVE-2026-14412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14412"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14412",
"url": "https://www.suse.com/security/cve/CVE-2026-14412"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14412",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14412"
},
{
"cve": "CVE-2026-14413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14413"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14413",
"url": "https://www.suse.com/security/cve/CVE-2026-14413"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14413",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14413"
},
{
"cve": "CVE-2026-14414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14414"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14414",
"url": "https://www.suse.com/security/cve/CVE-2026-14414"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14414",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14414"
},
{
"cve": "CVE-2026-14418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14418"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14418",
"url": "https://www.suse.com/security/cve/CVE-2026-14418"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14418",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14418"
},
{
"cve": "CVE-2026-14419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14419"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14419",
"url": "https://www.suse.com/security/cve/CVE-2026-14419"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14419",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14419"
},
{
"cve": "CVE-2026-14425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14425"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14425",
"url": "https://www.suse.com/security/cve/CVE-2026-14425"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14425",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14425"
},
{
"cve": "CVE-2026-14427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14427"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14427",
"url": "https://www.suse.com/security/cve/CVE-2026-14427"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14427",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14427"
},
{
"cve": "CVE-2026-14429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14429"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14429",
"url": "https://www.suse.com/security/cve/CVE-2026-14429"
},
{
"category": "external",
"summary": "SUSE Bug 1270051 for CVE-2026-14429",
"url": "https://bugzilla.suse.com/1270051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-14429"
},
{
"cve": "CVE-2026-15109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15109"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15109",
"url": "https://www.suse.com/security/cve/CVE-2026-15109"
},
{
"category": "external",
"summary": "SUSE Bug 1271093 for CVE-2026-15109",
"url": "https://bugzilla.suse.com/1271093"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-15109"
},
{
"cve": "CVE-2026-15766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15766"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15766",
"url": "https://www.suse.com/security/cve/CVE-2026-15766"
},
{
"category": "external",
"summary": "SUSE Bug 1271415 for CVE-2026-15766",
"url": "https://bugzilla.suse.com/1271415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-15766"
},
{
"cve": "CVE-2026-15774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15774"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15774",
"url": "https://www.suse.com/security/cve/CVE-2026-15774"
},
{
"category": "external",
"summary": "SUSE Bug 1271415 for CVE-2026-15774",
"url": "https://bugzilla.suse.com/1271415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-15774"
},
{
"cve": "CVE-2026-16413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16413"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16413",
"url": "https://www.suse.com/security/cve/CVE-2026-16413"
},
{
"category": "external",
"summary": "SUSE Bug 1272156 for CVE-2026-16413",
"url": "https://bugzilla.suse.com/1272156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-16413"
},
{
"cve": "CVE-2026-16417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16417"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16417",
"url": "https://www.suse.com/security/cve/CVE-2026-16417"
},
{
"category": "external",
"summary": "SUSE Bug 1272156 for CVE-2026-16417",
"url": "https://bugzilla.suse.com/1272156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-16417"
},
{
"cve": "CVE-2026-16419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16419"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16419",
"url": "https://www.suse.com/security/cve/CVE-2026-16419"
},
{
"category": "external",
"summary": "SUSE Bug 1272156 for CVE-2026-16419",
"url": "https://bugzilla.suse.com/1272156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-16419"
},
{
"cve": "CVE-2026-17653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17653"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17653",
"url": "https://www.suse.com/security/cve/CVE-2026-17653"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17653",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17653"
},
{
"cve": "CVE-2026-17655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17655"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17655",
"url": "https://www.suse.com/security/cve/CVE-2026-17655"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17655",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17655"
},
{
"cve": "CVE-2026-17667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17667"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17667",
"url": "https://www.suse.com/security/cve/CVE-2026-17667"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17667",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17667"
},
{
"cve": "CVE-2026-17668",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17668"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17668",
"url": "https://www.suse.com/security/cve/CVE-2026-17668"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17668",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17668"
},
{
"cve": "CVE-2026-17671",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17671"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17671",
"url": "https://www.suse.com/security/cve/CVE-2026-17671"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17671",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17671"
},
{
"cve": "CVE-2026-17675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17675"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17675",
"url": "https://www.suse.com/security/cve/CVE-2026-17675"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17675",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17675"
},
{
"cve": "CVE-2026-17676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17676"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17676",
"url": "https://www.suse.com/security/cve/CVE-2026-17676"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17676",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17676"
},
{
"cve": "CVE-2026-17677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17677"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17677",
"url": "https://www.suse.com/security/cve/CVE-2026-17677"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17677",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17677"
},
{
"cve": "CVE-2026-17678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17678"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17678",
"url": "https://www.suse.com/security/cve/CVE-2026-17678"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17678",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17678"
},
{
"cve": "CVE-2026-17682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17682"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17682",
"url": "https://www.suse.com/security/cve/CVE-2026-17682"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17682",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17682"
},
{
"cve": "CVE-2026-17683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17683"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17683",
"url": "https://www.suse.com/security/cve/CVE-2026-17683"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17683",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17683"
},
{
"cve": "CVE-2026-17687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17687"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17687",
"url": "https://www.suse.com/security/cve/CVE-2026-17687"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17687",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17687"
},
{
"cve": "CVE-2026-17689",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17689"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17689",
"url": "https://www.suse.com/security/cve/CVE-2026-17689"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17689",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17689"
},
{
"cve": "CVE-2026-17691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17691"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17691",
"url": "https://www.suse.com/security/cve/CVE-2026-17691"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17691",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17691"
},
{
"cve": "CVE-2026-17695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17695"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17695",
"url": "https://www.suse.com/security/cve/CVE-2026-17695"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17695",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17695"
},
{
"cve": "CVE-2026-17697",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17697"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17697",
"url": "https://www.suse.com/security/cve/CVE-2026-17697"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17697",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17697"
},
{
"cve": "CVE-2026-17701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17701"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17701",
"url": "https://www.suse.com/security/cve/CVE-2026-17701"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17701",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17701"
},
{
"cve": "CVE-2026-17702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17702"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17702",
"url": "https://www.suse.com/security/cve/CVE-2026-17702"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17702",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17702"
},
{
"cve": "CVE-2026-17704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17704"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17704",
"url": "https://www.suse.com/security/cve/CVE-2026-17704"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17704",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17704"
},
{
"cve": "CVE-2026-17712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17712"
}
],
"notes": [
{
"category": "general",
"text": "Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17712",
"url": "https://www.suse.com/security/cve/CVE-2026-17712"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17712",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17712"
},
{
"cve": "CVE-2026-17714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17714"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17714",
"url": "https://www.suse.com/security/cve/CVE-2026-17714"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17714",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17714"
},
{
"cve": "CVE-2026-17717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17717"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17717",
"url": "https://www.suse.com/security/cve/CVE-2026-17717"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17717",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17717"
},
{
"cve": "CVE-2026-17718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17718"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17718",
"url": "https://www.suse.com/security/cve/CVE-2026-17718"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17718",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17718"
},
{
"cve": "CVE-2026-17721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17721"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17721",
"url": "https://www.suse.com/security/cve/CVE-2026-17721"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17721",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17721"
},
{
"cve": "CVE-2026-17740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17740"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17740",
"url": "https://www.suse.com/security/cve/CVE-2026-17740"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17740",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17740"
},
{
"cve": "CVE-2026-17745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17745"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17745",
"url": "https://www.suse.com/security/cve/CVE-2026-17745"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17745",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17745"
},
{
"cve": "CVE-2026-17750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17750"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17750",
"url": "https://www.suse.com/security/cve/CVE-2026-17750"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17750",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17750"
},
{
"cve": "CVE-2026-17757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17757"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17757",
"url": "https://www.suse.com/security/cve/CVE-2026-17757"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17757",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17757"
},
{
"cve": "CVE-2026-17771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17771"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17771",
"url": "https://www.suse.com/security/cve/CVE-2026-17771"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17771",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17771"
},
{
"cve": "CVE-2026-17785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17785"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17785",
"url": "https://www.suse.com/security/cve/CVE-2026-17785"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17785",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17785"
},
{
"cve": "CVE-2026-17790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17790"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17790",
"url": "https://www.suse.com/security/cve/CVE-2026-17790"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17790",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17790"
},
{
"cve": "CVE-2026-17801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17801"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17801",
"url": "https://www.suse.com/security/cve/CVE-2026-17801"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17801",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17801"
},
{
"cve": "CVE-2026-17811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17811"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17811",
"url": "https://www.suse.com/security/cve/CVE-2026-17811"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17811",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17811"
},
{
"cve": "CVE-2026-17832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17832"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17832",
"url": "https://www.suse.com/security/cve/CVE-2026-17832"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17832",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17832"
},
{
"cve": "CVE-2026-17847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17847"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17847",
"url": "https://www.suse.com/security/cve/CVE-2026-17847"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17847",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17847"
},
{
"cve": "CVE-2026-17891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17891"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17891",
"url": "https://www.suse.com/security/cve/CVE-2026-17891"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17891",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17891"
},
{
"cve": "CVE-2026-17914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17914"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17914",
"url": "https://www.suse.com/security/cve/CVE-2026-17914"
},
{
"category": "external",
"summary": "SUSE Bug 1272936 for CVE-2026-17914",
"url": "https://bugzilla.suse.com/1272936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-17914"
},
{
"cve": "CVE-2026-19154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19154"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19154",
"url": "https://www.suse.com/security/cve/CVE-2026-19154"
},
{
"category": "external",
"summary": "SUSE Bug 1274549 for CVE-2026-19154",
"url": "https://bugzilla.suse.com/1274549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-19154"
},
{
"cve": "CVE-2026-19157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19157"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19157",
"url": "https://www.suse.com/security/cve/CVE-2026-19157"
},
{
"category": "external",
"summary": "SUSE Bug 1274549 for CVE-2026-19157",
"url": "https://bugzilla.suse.com/1274549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-19157"
},
{
"cve": "CVE-2026-19160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19160"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19160",
"url": "https://www.suse.com/security/cve/CVE-2026-19160"
},
{
"category": "external",
"summary": "SUSE Bug 1274549 for CVE-2026-19160",
"url": "https://bugzilla.suse.com/1274549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-19160"
},
{
"cve": "CVE-2026-19161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19161"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19161",
"url": "https://www.suse.com/security/cve/CVE-2026-19161"
},
{
"category": "external",
"summary": "SUSE Bug 1274549 for CVE-2026-19161",
"url": "https://bugzilla.suse.com/1274549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-19161"
},
{
"cve": "CVE-2026-19173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19173"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19173",
"url": "https://www.suse.com/security/cve/CVE-2026-19173"
},
{
"category": "external",
"summary": "SUSE Bug 1274549 for CVE-2026-19173",
"url": "https://bugzilla.suse.com/1274549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-19173"
},
{
"cve": "CVE-2026-19176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19176"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19176",
"url": "https://www.suse.com/security/cve/CVE-2026-19176"
},
{
"category": "external",
"summary": "SUSE Bug 1274549 for CVE-2026-19176",
"url": "https://bugzilla.suse.com/1274549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-19176"
},
{
"cve": "CVE-2026-28984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28984"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28984",
"url": "https://www.suse.com/security/cve/CVE-2026-28984"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-28984",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-28984"
},
{
"cve": "CVE-2026-3536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3536"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3536",
"url": "https://www.suse.com/security/cve/CVE-2026-3536"
},
{
"category": "external",
"summary": "SUSE Bug 1259213 for CVE-2026-3536",
"url": "https://bugzilla.suse.com/1259213"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-3536"
},
{
"cve": "CVE-2026-3538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3538"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3538",
"url": "https://www.suse.com/security/cve/CVE-2026-3538"
},
{
"category": "external",
"summary": "SUSE Bug 1259213 for CVE-2026-3538",
"url": "https://bugzilla.suse.com/1259213"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-3538"
},
{
"cve": "CVE-2026-3909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3909"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3909",
"url": "https://www.suse.com/security/cve/CVE-2026-3909"
},
{
"category": "external",
"summary": "SUSE Bug 1259648 for CVE-2026-3909",
"url": "https://bugzilla.suse.com/1259648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-3909"
},
{
"cve": "CVE-2026-3931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3931"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3931",
"url": "https://www.suse.com/security/cve/CVE-2026-3931"
},
{
"category": "external",
"summary": "SUSE Bug 1259530 for CVE-2026-3931",
"url": "https://bugzilla.suse.com/1259530"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-3931"
},
{
"cve": "CVE-2026-39872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39872"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39872",
"url": "https://www.suse.com/security/cve/CVE-2026-39872"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-39872",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-39872"
},
{
"cve": "CVE-2026-43663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43663"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43663",
"url": "https://www.suse.com/security/cve/CVE-2026-43663"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43663",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43663"
},
{
"cve": "CVE-2026-43676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43676"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43676",
"url": "https://www.suse.com/security/cve/CVE-2026-43676"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43676",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43676"
},
{
"cve": "CVE-2026-43699",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43699"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43699",
"url": "https://www.suse.com/security/cve/CVE-2026-43699"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43699",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43699"
},
{
"cve": "CVE-2026-43701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43701"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43701",
"url": "https://www.suse.com/security/cve/CVE-2026-43701"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43701",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43701"
},
{
"cve": "CVE-2026-43707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43707"
}
],
"notes": [
{
"category": "general",
"text": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43707",
"url": "https://www.suse.com/security/cve/CVE-2026-43707"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43707",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43707"
},
{
"cve": "CVE-2026-43712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43712"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43712",
"url": "https://www.suse.com/security/cve/CVE-2026-43712"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43712",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43712"
},
{
"cve": "CVE-2026-43713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43713"
}
],
"notes": [
{
"category": "general",
"text": "A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43713",
"url": "https://www.suse.com/security/cve/CVE-2026-43713"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43713",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43713"
},
{
"cve": "CVE-2026-43715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43715"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43715",
"url": "https://www.suse.com/security/cve/CVE-2026-43715"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43715",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43715"
},
{
"cve": "CVE-2026-43716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43716"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43716",
"url": "https://www.suse.com/security/cve/CVE-2026-43716"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43716",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43716"
},
{
"cve": "CVE-2026-43720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43720"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43720",
"url": "https://www.suse.com/security/cve/CVE-2026-43720"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43720",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43720"
},
{
"cve": "CVE-2026-43721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43721"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43721",
"url": "https://www.suse.com/security/cve/CVE-2026-43721"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43721",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43721"
},
{
"cve": "CVE-2026-43725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43725"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43725",
"url": "https://www.suse.com/security/cve/CVE-2026-43725"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43725",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43725"
},
{
"cve": "CVE-2026-43726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43726"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43726",
"url": "https://www.suse.com/security/cve/CVE-2026-43726"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43726",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43726"
},
{
"cve": "CVE-2026-43727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43727"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43727",
"url": "https://www.suse.com/security/cve/CVE-2026-43727"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43727",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43727"
},
{
"cve": "CVE-2026-43731",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43731"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43731",
"url": "https://www.suse.com/security/cve/CVE-2026-43731"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43731",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43731"
},
{
"cve": "CVE-2026-43732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43732"
}
],
"notes": [
{
"category": "general",
"text": "A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43732",
"url": "https://www.suse.com/security/cve/CVE-2026-43732"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43732",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43732"
},
{
"cve": "CVE-2026-43734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43734"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43734",
"url": "https://www.suse.com/security/cve/CVE-2026-43734"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43734",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43734"
},
{
"cve": "CVE-2026-43740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43740"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may result in the disclosure of process memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43740",
"url": "https://www.suse.com/security/cve/CVE-2026-43740"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43740",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43740"
},
{
"cve": "CVE-2026-43742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43742"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43742",
"url": "https://www.suse.com/security/cve/CVE-2026-43742"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43742",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43742"
},
{
"cve": "CVE-2026-43745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43745"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43745",
"url": "https://www.suse.com/security/cve/CVE-2026-43745"
},
{
"category": "external",
"summary": "SUSE Bug 1271638 for CVE-2026-43745",
"url": "https://bugzilla.suse.com/1271638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43745"
},
{
"cve": "CVE-2026-43795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43795"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43795",
"url": "https://www.suse.com/security/cve/CVE-2026-43795"
},
{
"category": "external",
"summary": "SUSE Bug 1277003 for CVE-2026-43795",
"url": "https://bugzilla.suse.com/1277003"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43795"
},
{
"cve": "CVE-2026-43804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43804"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may lead to an app denial-of-service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43804",
"url": "https://www.suse.com/security/cve/CVE-2026-43804"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-43804",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43804"
},
{
"cve": "CVE-2026-4448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4448"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4448",
"url": "https://www.suse.com/security/cve/CVE-2026-4448"
},
{
"category": "external",
"summary": "SUSE Bug 1259964 for CVE-2026-4448",
"url": "https://bugzilla.suse.com/1259964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-4448"
},
{
"cve": "CVE-2026-4452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4452"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4452",
"url": "https://www.suse.com/security/cve/CVE-2026-4452"
},
{
"category": "external",
"summary": "SUSE Bug 1259964 for CVE-2026-4452",
"url": "https://bugzilla.suse.com/1259964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-4452"
},
{
"cve": "CVE-2026-4460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4460"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4460",
"url": "https://www.suse.com/security/cve/CVE-2026-4460"
},
{
"category": "external",
"summary": "SUSE Bug 1259964 for CVE-2026-4460",
"url": "https://bugzilla.suse.com/1259964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-4460"
},
{
"cve": "CVE-2026-4464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4464"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4464",
"url": "https://www.suse.com/security/cve/CVE-2026-4464"
},
{
"category": "external",
"summary": "SUSE Bug 1259964 for CVE-2026-4464",
"url": "https://bugzilla.suse.com/1259964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-4464"
},
{
"cve": "CVE-2026-5275",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5275"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5275",
"url": "https://www.suse.com/security/cve/CVE-2026-5275"
},
{
"category": "external",
"summary": "SUSE Bug 1261249 for CVE-2026-5275",
"url": "https://bugzilla.suse.com/1261249"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-5275"
},
{
"cve": "CVE-2026-5277",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5277"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5277",
"url": "https://www.suse.com/security/cve/CVE-2026-5277"
},
{
"category": "external",
"summary": "SUSE Bug 1261249 for CVE-2026-5277",
"url": "https://bugzilla.suse.com/1261249"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-5277"
},
{
"cve": "CVE-2026-5283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5283"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5283",
"url": "https://www.suse.com/security/cve/CVE-2026-5283"
},
{
"category": "external",
"summary": "SUSE Bug 1261249 for CVE-2026-5283",
"url": "https://bugzilla.suse.com/1261249"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-5283"
},
{
"cve": "CVE-2026-5868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5868"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5868",
"url": "https://www.suse.com/security/cve/CVE-2026-5868"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5868",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-5868"
},
{
"cve": "CVE-2026-5870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5870"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5870",
"url": "https://www.suse.com/security/cve/CVE-2026-5870"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5870",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-5870"
},
{
"cve": "CVE-2026-5879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5879"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5879",
"url": "https://www.suse.com/security/cve/CVE-2026-5879"
},
{
"category": "external",
"summary": "SUSE Bug 1261758 for CVE-2026-5879",
"url": "https://bugzilla.suse.com/1261758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-5879"
},
{
"cve": "CVE-2026-6296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6296"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6296",
"url": "https://www.suse.com/security/cve/CVE-2026-6296"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6296",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6296"
},
{
"cve": "CVE-2026-6298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6298"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6298",
"url": "https://www.suse.com/security/cve/CVE-2026-6298"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6298",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6298"
},
{
"cve": "CVE-2026-6364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6364"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6364",
"url": "https://www.suse.com/security/cve/CVE-2026-6364"
},
{
"category": "external",
"summary": "SUSE Bug 1262174 for CVE-2026-6364",
"url": "https://bugzilla.suse.com/1262174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6364"
},
{
"cve": "CVE-2026-64713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64713"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64713",
"url": "https://www.suse.com/security/cve/CVE-2026-64713"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-64713",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64713"
},
{
"cve": "CVE-2026-64715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64715"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64715",
"url": "https://www.suse.com/security/cve/CVE-2026-64715"
},
{
"category": "external",
"summary": "SUSE Bug 1277004 for CVE-2026-64715",
"url": "https://bugzilla.suse.com/1277004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64715"
},
{
"cve": "CVE-2026-64718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64718"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, visionOS 27, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64718",
"url": "https://www.suse.com/security/cve/CVE-2026-64718"
},
{
"category": "external",
"summary": "SUSE Bug 1277001 for CVE-2026-64718",
"url": "https://bugzilla.suse.com/1277001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64718"
},
{
"cve": "CVE-2026-64728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64728"
}
],
"notes": [
{
"category": "general",
"text": "A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64728",
"url": "https://www.suse.com/security/cve/CVE-2026-64728"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-64728",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64728"
},
{
"cve": "CVE-2026-64730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64730"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64730",
"url": "https://www.suse.com/security/cve/CVE-2026-64730"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-64730",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64730"
},
{
"cve": "CVE-2026-64753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64753"
}
],
"notes": [
{
"category": "general",
"text": "A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64753",
"url": "https://www.suse.com/security/cve/CVE-2026-64753"
},
{
"category": "external",
"summary": "SUSE Bug 1281117 for CVE-2026-64753",
"url": "https://bugzilla.suse.com/1281117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64753"
},
{
"cve": "CVE-2026-64757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64757"
}
],
"notes": [
{
"category": "general",
"text": "A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64757",
"url": "https://www.suse.com/security/cve/CVE-2026-64757"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-64757",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64757"
},
{
"cve": "CVE-2026-64778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64778"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Visiting a maliciously crafted website may leak sensitive data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64778",
"url": "https://www.suse.com/security/cve/CVE-2026-64778"
},
{
"category": "external",
"summary": "SUSE Bug 1277005 for CVE-2026-64778",
"url": "https://bugzilla.suse.com/1277005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64778"
},
{
"cve": "CVE-2026-64779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64779"
}
],
"notes": [
{
"category": "general",
"text": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64779",
"url": "https://www.suse.com/security/cve/CVE-2026-64779"
},
{
"category": "external",
"summary": "SUSE Bug 1277006 for CVE-2026-64779",
"url": "https://bugzilla.suse.com/1277006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-64779"
},
{
"cve": "CVE-2026-64780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64780"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64780",
"url": "https://www.suse.com/security/cve/CVE-2026-64780"
},
{
"category": "external",
"summary": "SUSE Bug 1277007 for CVE-2026-64780",
"url": "https://bugzilla.suse.com/1277007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64780"
},
{
"cve": "CVE-2026-64782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64782"
}
],
"notes": [
{
"category": "general",
"text": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64782",
"url": "https://www.suse.com/security/cve/CVE-2026-64782"
},
{
"category": "external",
"summary": "SUSE Bug 1277009 for CVE-2026-64782",
"url": "https://bugzilla.suse.com/1277009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-64782"
},
{
"cve": "CVE-2026-64783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64783"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64783",
"url": "https://www.suse.com/security/cve/CVE-2026-64783"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-64783",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64783"
},
{
"cve": "CVE-2026-64784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64784"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64784",
"url": "https://www.suse.com/security/cve/CVE-2026-64784"
},
{
"category": "external",
"summary": "SUSE Bug 1277010 for CVE-2026-64784",
"url": "https://bugzilla.suse.com/1277010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64784"
},
{
"cve": "CVE-2026-64787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64787"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64787",
"url": "https://www.suse.com/security/cve/CVE-2026-64787"
},
{
"category": "external",
"summary": "SUSE Bug 1275791 for CVE-2026-64787",
"url": "https://bugzilla.suse.com/1275791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64787"
},
{
"cve": "CVE-2026-65331",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65331"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65331",
"url": "https://www.suse.com/security/cve/CVE-2026-65331"
},
{
"category": "external",
"summary": "SUSE Bug 1277011 for CVE-2026-65331",
"url": "https://bugzilla.suse.com/1277011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65331"
},
{
"cve": "CVE-2026-65332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65332"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65332",
"url": "https://www.suse.com/security/cve/CVE-2026-65332"
},
{
"category": "external",
"summary": "SUSE Bug 1277012 for CVE-2026-65332",
"url": "https://bugzilla.suse.com/1277012"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65332"
},
{
"cve": "CVE-2026-65333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65333"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65333",
"url": "https://www.suse.com/security/cve/CVE-2026-65333"
},
{
"category": "external",
"summary": "SUSE Bug 1277013 for CVE-2026-65333",
"url": "https://bugzilla.suse.com/1277013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65333"
},
{
"cve": "CVE-2026-65334",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65334"
}
],
"notes": [
{
"category": "general",
"text": "A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65334",
"url": "https://www.suse.com/security/cve/CVE-2026-65334"
},
{
"category": "external",
"summary": "SUSE Bug 1277014 for CVE-2026-65334",
"url": "https://bugzilla.suse.com/1277014"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65334"
},
{
"cve": "CVE-2026-65335",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65335"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65335",
"url": "https://www.suse.com/security/cve/CVE-2026-65335"
},
{
"category": "external",
"summary": "SUSE Bug 1277015 for CVE-2026-65335",
"url": "https://bugzilla.suse.com/1277015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65335"
},
{
"cve": "CVE-2026-65336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65336"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65336",
"url": "https://www.suse.com/security/cve/CVE-2026-65336"
},
{
"category": "external",
"summary": "SUSE Bug 1277016 for CVE-2026-65336",
"url": "https://bugzilla.suse.com/1277016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65336"
},
{
"cve": "CVE-2026-65337",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65337"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65337",
"url": "https://www.suse.com/security/cve/CVE-2026-65337"
},
{
"category": "external",
"summary": "SUSE Bug 1277017 for CVE-2026-65337",
"url": "https://bugzilla.suse.com/1277017"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65337"
},
{
"cve": "CVE-2026-65338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65338"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65338",
"url": "https://www.suse.com/security/cve/CVE-2026-65338"
},
{
"category": "external",
"summary": "SUSE Bug 1277018 for CVE-2026-65338",
"url": "https://bugzilla.suse.com/1277018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65338"
},
{
"cve": "CVE-2026-65340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65340"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65340",
"url": "https://www.suse.com/security/cve/CVE-2026-65340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65340"
},
{
"cve": "CVE-2026-65341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65341"
}
],
"notes": [
{
"category": "general",
"text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65341",
"url": "https://www.suse.com/security/cve/CVE-2026-65341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65341"
},
{
"cve": "CVE-2026-65351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65351"
}
],
"notes": [
{
"category": "general",
"text": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65351",
"url": "https://www.suse.com/security/cve/CVE-2026-65351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-65351"
},
{
"cve": "CVE-2026-7340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7340"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7340",
"url": "https://www.suse.com/security/cve/CVE-2026-7340"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7340",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7340"
},
{
"cve": "CVE-2026-7353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7353"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7353",
"url": "https://www.suse.com/security/cve/CVE-2026-7353"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7353",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7353"
},
{
"cve": "CVE-2026-7354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7354"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7354",
"url": "https://www.suse.com/security/cve/CVE-2026-7354"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7354",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7354"
},
{
"cve": "CVE-2026-7359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7359"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7359",
"url": "https://www.suse.com/security/cve/CVE-2026-7359"
},
{
"category": "external",
"summary": "SUSE Bug 1263158 for CVE-2026-7359",
"url": "https://bugzilla.suse.com/1263158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7359"
},
{
"cve": "CVE-2026-76041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-76041"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-76041",
"url": "https://www.suse.com/security/cve/CVE-2026-76041"
},
{
"category": "external",
"summary": "SUSE Bug 1275706 for CVE-2026-76041",
"url": "https://bugzilla.suse.com/1275706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-76041"
},
{
"cve": "CVE-2026-76046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-76046"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-76046",
"url": "https://www.suse.com/security/cve/CVE-2026-76046"
},
{
"category": "external",
"summary": "SUSE Bug 1275706 for CVE-2026-76046",
"url": "https://bugzilla.suse.com/1275706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-76046"
},
{
"cve": "CVE-2026-78376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78376"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78376",
"url": "https://www.suse.com/security/cve/CVE-2026-78376"
},
{
"category": "external",
"summary": "SUSE Bug 1276418 for CVE-2026-78376",
"url": "https://bugzilla.suse.com/1276418"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-78376"
},
{
"cve": "CVE-2026-78904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78904"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78904",
"url": "https://www.suse.com/security/cve/CVE-2026-78904"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78904",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78904"
},
{
"cve": "CVE-2026-78905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78905"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78905",
"url": "https://www.suse.com/security/cve/CVE-2026-78905"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78905",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78905"
},
{
"cve": "CVE-2026-78906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78906"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78906",
"url": "https://www.suse.com/security/cve/CVE-2026-78906"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78906",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78906"
},
{
"cve": "CVE-2026-78914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78914"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78914",
"url": "https://www.suse.com/security/cve/CVE-2026-78914"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78914",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78914"
},
{
"cve": "CVE-2026-78958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78958"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78958",
"url": "https://www.suse.com/security/cve/CVE-2026-78958"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78958",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78958"
},
{
"cve": "CVE-2026-78965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78965"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78965",
"url": "https://www.suse.com/security/cve/CVE-2026-78965"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78965",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78965"
},
{
"cve": "CVE-2026-78978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78978"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78978",
"url": "https://www.suse.com/security/cve/CVE-2026-78978"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78978",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78978"
},
{
"cve": "CVE-2026-78989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78989"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78989",
"url": "https://www.suse.com/security/cve/CVE-2026-78989"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-78989",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-78989"
},
{
"cve": "CVE-2026-7900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7900"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7900",
"url": "https://www.suse.com/security/cve/CVE-2026-7900"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7900",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7900"
},
{
"cve": "CVE-2026-7901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7901"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7901",
"url": "https://www.suse.com/security/cve/CVE-2026-7901"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7901",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7901"
},
{
"cve": "CVE-2026-79019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79019"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79019",
"url": "https://www.suse.com/security/cve/CVE-2026-79019"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79019",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79019"
},
{
"cve": "CVE-2026-79020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79020"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79020",
"url": "https://www.suse.com/security/cve/CVE-2026-79020"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79020",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79020"
},
{
"cve": "CVE-2026-7903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7903"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7903",
"url": "https://www.suse.com/security/cve/CVE-2026-7903"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7903",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7903"
},
{
"cve": "CVE-2026-79043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79043"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79043",
"url": "https://www.suse.com/security/cve/CVE-2026-79043"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79043",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79043"
},
{
"cve": "CVE-2026-79048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79048"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79048",
"url": "https://www.suse.com/security/cve/CVE-2026-79048"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79048",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79048"
},
{
"cve": "CVE-2026-79112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79112"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79112",
"url": "https://www.suse.com/security/cve/CVE-2026-79112"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79112",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79112"
},
{
"cve": "CVE-2026-79118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79118"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79118",
"url": "https://www.suse.com/security/cve/CVE-2026-79118"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79118",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79118"
},
{
"cve": "CVE-2026-79120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79120"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79120",
"url": "https://www.suse.com/security/cve/CVE-2026-79120"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79120",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79120"
},
{
"cve": "CVE-2026-79127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79127"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79127",
"url": "https://www.suse.com/security/cve/CVE-2026-79127"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79127",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79127"
},
{
"cve": "CVE-2026-79130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79130"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79130",
"url": "https://www.suse.com/security/cve/CVE-2026-79130"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79130",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79130"
},
{
"cve": "CVE-2026-79131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79131"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79131",
"url": "https://www.suse.com/security/cve/CVE-2026-79131"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79131",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79131"
},
{
"cve": "CVE-2026-79138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79138"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79138",
"url": "https://www.suse.com/security/cve/CVE-2026-79138"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79138",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79138"
},
{
"cve": "CVE-2026-79142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79142"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79142",
"url": "https://www.suse.com/security/cve/CVE-2026-79142"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79142",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79142"
},
{
"cve": "CVE-2026-79144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79144"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79144",
"url": "https://www.suse.com/security/cve/CVE-2026-79144"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79144",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79144"
},
{
"cve": "CVE-2026-79147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79147"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79147",
"url": "https://www.suse.com/security/cve/CVE-2026-79147"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79147",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79147"
},
{
"cve": "CVE-2026-79149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79149"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79149",
"url": "https://www.suse.com/security/cve/CVE-2026-79149"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79149",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79149"
},
{
"cve": "CVE-2026-79188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79188"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79188",
"url": "https://www.suse.com/security/cve/CVE-2026-79188"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79188",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79188"
},
{
"cve": "CVE-2026-79189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79189"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79189",
"url": "https://www.suse.com/security/cve/CVE-2026-79189"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79189",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79189"
},
{
"cve": "CVE-2026-7920",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7920"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7920",
"url": "https://www.suse.com/security/cve/CVE-2026-7920"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7920",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7920"
},
{
"cve": "CVE-2026-79229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79229"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79229",
"url": "https://www.suse.com/security/cve/CVE-2026-79229"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79229",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79229"
},
{
"cve": "CVE-2026-7923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7923"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7923",
"url": "https://www.suse.com/security/cve/CVE-2026-7923"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7923",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7923"
},
{
"cve": "CVE-2026-79230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79230"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79230",
"url": "https://www.suse.com/security/cve/CVE-2026-79230"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79230",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79230"
},
{
"cve": "CVE-2026-79240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79240"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79240",
"url": "https://www.suse.com/security/cve/CVE-2026-79240"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79240",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79240"
},
{
"cve": "CVE-2026-79269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79269"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79269",
"url": "https://www.suse.com/security/cve/CVE-2026-79269"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79269",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79269"
},
{
"cve": "CVE-2026-79270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79270"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79270",
"url": "https://www.suse.com/security/cve/CVE-2026-79270"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79270",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79270"
},
{
"cve": "CVE-2026-79275",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79275"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79275",
"url": "https://www.suse.com/security/cve/CVE-2026-79275"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79275",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79275"
},
{
"cve": "CVE-2026-79282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79282"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79282",
"url": "https://www.suse.com/security/cve/CVE-2026-79282"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79282",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79282"
},
{
"cve": "CVE-2026-79285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-79285"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-79285",
"url": "https://www.suse.com/security/cve/CVE-2026-79285"
},
{
"category": "external",
"summary": "SUSE Bug 1276749 for CVE-2026-79285",
"url": "https://bugzilla.suse.com/1276749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-79285"
},
{
"cve": "CVE-2026-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7942"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7942",
"url": "https://www.suse.com/security/cve/CVE-2026-7942"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7942",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7942"
},
{
"cve": "CVE-2026-7943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7943"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7943",
"url": "https://www.suse.com/security/cve/CVE-2026-7943"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7943",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7943"
},
{
"cve": "CVE-2026-7949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7949"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7949",
"url": "https://www.suse.com/security/cve/CVE-2026-7949"
},
{
"category": "external",
"summary": "SUSE Bug 1264175 for CVE-2026-7949",
"url": "https://bugzilla.suse.com/1264175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7949"
},
{
"cve": "CVE-2026-83596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-83596"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-83596",
"url": "https://www.suse.com/security/cve/CVE-2026-83596"
},
{
"category": "external",
"summary": "SUSE Bug 1277755 for CVE-2026-83596",
"url": "https://bugzilla.suse.com/1277755"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-83596"
},
{
"cve": "CVE-2026-84635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84635"
}
],
"notes": [
{
"category": "general",
"text": "A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84635",
"url": "https://www.suse.com/security/cve/CVE-2026-84635"
},
{
"category": "external",
"summary": "SUSE Bug 1281116 for CVE-2026-84635",
"url": "https://bugzilla.suse.com/1281116"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-84635"
},
{
"cve": "CVE-2026-8510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8510"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8510",
"url": "https://www.suse.com/security/cve/CVE-2026-8510"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8510",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8510"
},
{
"cve": "CVE-2026-8519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8519"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8519",
"url": "https://www.suse.com/security/cve/CVE-2026-8519"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8519",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8519"
},
{
"cve": "CVE-2026-8525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8525"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8525",
"url": "https://www.suse.com/security/cve/CVE-2026-8525"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8525",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8525"
},
{
"cve": "CVE-2026-8554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8554"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8554",
"url": "https://www.suse.com/security/cve/CVE-2026-8554"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8554",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8554"
},
{
"cve": "CVE-2026-8556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8556"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8556",
"url": "https://www.suse.com/security/cve/CVE-2026-8556"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8556",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8556"
},
{
"cve": "CVE-2026-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8567"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8567",
"url": "https://www.suse.com/security/cve/CVE-2026-8567"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8567",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8567"
},
{
"cve": "CVE-2026-8579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8579"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8579",
"url": "https://www.suse.com/security/cve/CVE-2026-8579"
},
{
"category": "external",
"summary": "SUSE Bug 1265159 for CVE-2026-8579",
"url": "https://bugzilla.suse.com/1265159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-8579"
},
{
"cve": "CVE-2026-9877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9877"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9877",
"url": "https://www.suse.com/security/cve/CVE-2026-9877"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9877",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9877"
},
{
"cve": "CVE-2026-9878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9878"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9878",
"url": "https://www.suse.com/security/cve/CVE-2026-9878"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9878",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9878"
},
{
"cve": "CVE-2026-9879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9879"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9879",
"url": "https://www.suse.com/security/cve/CVE-2026-9879"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9879",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9879"
},
{
"cve": "CVE-2026-9882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9882"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9882",
"url": "https://www.suse.com/security/cve/CVE-2026-9882"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9882",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9882"
},
{
"cve": "CVE-2026-9892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9892"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9892",
"url": "https://www.suse.com/security/cve/CVE-2026-9892"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9892",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9892"
},
{
"cve": "CVE-2026-9893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9893"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9893",
"url": "https://www.suse.com/security/cve/CVE-2026-9893"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9893",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9893"
},
{
"cve": "CVE-2026-9899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9899"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9899",
"url": "https://www.suse.com/security/cve/CVE-2026-9899"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9899",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9899"
},
{
"cve": "CVE-2026-9900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9900"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9900",
"url": "https://www.suse.com/security/cve/CVE-2026-9900"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9900",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9900"
},
{
"cve": "CVE-2026-9901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9901"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9901",
"url": "https://www.suse.com/security/cve/CVE-2026-9901"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9901",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9901"
},
{
"cve": "CVE-2026-9904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9904"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9904",
"url": "https://www.suse.com/security/cve/CVE-2026-9904"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9904",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9904"
},
{
"cve": "CVE-2026-9908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9908"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9908",
"url": "https://www.suse.com/security/cve/CVE-2026-9908"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9908",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9908"
},
{
"cve": "CVE-2026-9909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9909"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9909",
"url": "https://www.suse.com/security/cve/CVE-2026-9909"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9909",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9909"
},
{
"cve": "CVE-2026-9910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9910"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9910",
"url": "https://www.suse.com/security/cve/CVE-2026-9910"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9910",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9910"
},
{
"cve": "CVE-2026-9911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9911"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9911",
"url": "https://www.suse.com/security/cve/CVE-2026-9911"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9911",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9911"
},
{
"cve": "CVE-2026-9913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9913"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9913",
"url": "https://www.suse.com/security/cve/CVE-2026-9913"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9913",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9913"
},
{
"cve": "CVE-2026-9914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9914"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9914",
"url": "https://www.suse.com/security/cve/CVE-2026-9914"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9914",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9914"
},
{
"cve": "CVE-2026-9915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9915"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9915",
"url": "https://www.suse.com/security/cve/CVE-2026-9915"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9915",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9915"
},
{
"cve": "CVE-2026-9916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9916"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9916",
"url": "https://www.suse.com/security/cve/CVE-2026-9916"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9916",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9916"
},
{
"cve": "CVE-2026-9923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9923"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9923",
"url": "https://www.suse.com/security/cve/CVE-2026-9923"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9923",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9923"
},
{
"cve": "CVE-2026-9924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9924"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9924",
"url": "https://www.suse.com/security/cve/CVE-2026-9924"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9924",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9924"
},
{
"cve": "CVE-2026-9925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9925"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9925",
"url": "https://www.suse.com/security/cve/CVE-2026-9925"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9925",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9925"
},
{
"cve": "CVE-2026-9926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9926"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9926",
"url": "https://www.suse.com/security/cve/CVE-2026-9926"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9926",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9926"
},
{
"cve": "CVE-2026-9927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9927"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9927",
"url": "https://www.suse.com/security/cve/CVE-2026-9927"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9927",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9927"
},
{
"cve": "CVE-2026-9928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9928"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9928",
"url": "https://www.suse.com/security/cve/CVE-2026-9928"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9928",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9928"
},
{
"cve": "CVE-2026-9932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9932"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9932",
"url": "https://www.suse.com/security/cve/CVE-2026-9932"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9932",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9932"
},
{
"cve": "CVE-2026-9935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9935"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9935",
"url": "https://www.suse.com/security/cve/CVE-2026-9935"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9935",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9935"
},
{
"cve": "CVE-2026-9940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9940"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9940",
"url": "https://www.suse.com/security/cve/CVE-2026-9940"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9940",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9940"
},
{
"cve": "CVE-2026-9941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9941"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9941",
"url": "https://www.suse.com/security/cve/CVE-2026-9941"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9941",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9941"
},
{
"cve": "CVE-2026-9942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9942"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9942",
"url": "https://www.suse.com/security/cve/CVE-2026-9942"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9942",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9942"
},
{
"cve": "CVE-2026-9944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9944"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9944",
"url": "https://www.suse.com/security/cve/CVE-2026-9944"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9944",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9944"
},
{
"cve": "CVE-2026-9946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9946"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9946",
"url": "https://www.suse.com/security/cve/CVE-2026-9946"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9946",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9946"
},
{
"cve": "CVE-2026-9953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9953"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9953",
"url": "https://www.suse.com/security/cve/CVE-2026-9953"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9953",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9953"
},
{
"cve": "CVE-2026-9965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9965"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9965",
"url": "https://www.suse.com/security/cve/CVE-2026-9965"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9965",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9965"
},
{
"cve": "CVE-2026-9969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9969"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9969",
"url": "https://www.suse.com/security/cve/CVE-2026-9969"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9969",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9969"
},
{
"cve": "CVE-2026-9975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9975"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9975",
"url": "https://www.suse.com/security/cve/CVE-2026-9975"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9975",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9975"
},
{
"cve": "CVE-2026-9981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9981"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9981",
"url": "https://www.suse.com/security/cve/CVE-2026-9981"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9981",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9981"
},
{
"cve": "CVE-2026-9982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9982"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9982",
"url": "https://www.suse.com/security/cve/CVE-2026-9982"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9982",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9982"
},
{
"cve": "CVE-2026-9983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9983"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9983",
"url": "https://www.suse.com/security/cve/CVE-2026-9983"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9983",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9983"
},
{
"cve": "CVE-2026-9998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9998"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9998",
"url": "https://www.suse.com/security/cve/CVE-2026-9998"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9998",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9998"
},
{
"cve": "CVE-2026-9999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9999"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9999",
"url": "https://www.suse.com/security/cve/CVE-2026-9999"
},
{
"category": "external",
"summary": "SUSE Bug 1266471 for CVE-2026-9999",
"url": "https://bugzilla.suse.com/1266471"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-devel-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-0:2.54.0-1.el8_10.x86_64",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.i686",
"SUSE Liberty Linux 8:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-30T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-9999"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…