Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-43725

Опубликовано: 10 июл. 2026
Источник: redhat
CVSS3: 7.1

Описание

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox.

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper input validation, potentially allowing access to resources that should be restricted.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6pywebkitgtkOut of support scope
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Out of support scope
Red Hat Enterprise Linux 7 Extended Lifecycle Supportwebkitgtk4FixedRHSA-2026:5856424.08.2026
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2026:4208820.07.2026
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2026:5734820.08.2026
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onwebkit2gtk3FixedRHSA-2026:5734820.08.2026
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2026:5932525.08.2026
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onwebkit2gtk3FixedRHSA-2026:5932525.08.2026
Red Hat Enterprise Linux 8.8 Telecommunications Update Servicewebkit2gtk3FixedRHSA-2026:5932625.08.2026

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=2500532webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
3 месяца назад

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.

CVSS3: 7.1
nvd
3 месяца назад

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.

CVSS3: 7.1
debian
3 месяца назад

The issue was addressed with improved input validation. This issue is ...

CVSS3: 7.1
github
3 месяца назад

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox.

suse-cvrf
около 2 месяцев назад

Security update for webkit2gtk3

7.1 High

CVSS3