RLSA-2026:69098

Описание

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

• chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)

• chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)

• chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)

• chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)

• chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)

• webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)

• webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)

• webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)

• webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)

• webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)

• chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)

• webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)

• webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)

• webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)

• chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)

• webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)

• webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.