Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-20652

Опубликовано: 18 мар. 2026
Источник: redhat
CVSS3: 7.5

Описание

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.

A flaw was found in WebKitGTK. A remote attacker may be able to cause a denial-of-service due to improper memory handling.

Отчет

This issue allows a remote attacker to cause a denial of service. Due to this reason, this flaw has been rated with an important severity.

Меры по смягчению последствий

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Not affected
Red Hat Enterprise Linux 7 Extended Lifecycle Supportwebkitgtk4FixedRHSA-2026:2213601.06.2026
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2026:1070227.04.2026
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2026:1605611.05.2026
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onwebkit2gtk3FixedRHSA-2026:1605611.05.2026
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2026:1384505.05.2026
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicewebkit2gtk3FixedRHSA-2026:1384505.05.2026
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionswebkit2gtk3FixedRHSA-2026:1384505.05.2026
Red Hat Enterprise Linux 8.8 Telecommunications Update Servicewebkit2gtk3FixedRHSA-2026:1181429.04.2026

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2448793webkitgtk: A remote attacker may be able to cause a denial-of-service

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote attacker may be able to cause a denial-of-service.

CVSS3: 7.5
nvd
4 месяца назад

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.

CVSS3: 7.5
debian
4 месяца назад

The issue was addressed with improved memory handling. This issue is f ...

CVSS3: 7.5
github
4 месяца назад

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote attacker may be able to cause a denial-of-service.

CVSS3: 7.5
fstec
4 месяца назад

Уязвимость компонента JavaFX (WebKitGTK) программной платформы Oracle Java SE, позволяющая нарушителю вызвать отказ в обслуживании

7.5 High

CVSS3