Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-43745

Опубликовано: 10 июл. 2026
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6pywebkitgtkOut of support scope
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Out of support scope
Red Hat Enterprise Linux 7 Extended Lifecycle Supportwebkitgtk4FixedRHSA-2026:5856424.08.2026
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2026:4208820.07.2026
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2026:5734820.08.2026
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onwebkit2gtk3FixedRHSA-2026:5734820.08.2026
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2026:5932525.08.2026
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onwebkit2gtk3FixedRHSA-2026:5932525.08.2026
Red Hat Enterprise Linux 8.8 Telecommunications Update Servicewebkit2gtk3FixedRHSA-2026:5932625.08.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2500540webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

EPSS

Процентиль: 50%
0.00679
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS3: 6.5
nvd
3 месяца назад

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS3: 6.5
debian
3 месяца назад

An out-of-bounds write issue was addressed with improved input validat ...

CVSS3: 6.5
github
3 месяца назад

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

suse-cvrf
около 2 месяцев назад

Security update for webkit2gtk3

EPSS

Процентиль: 50%
0.00679
Низкий

6.5 Medium

CVSS3