Red Hat Product Security has published an important security advisory (RHSA-2025:8194) for webkit2gtk3, addressing eight CVEs including CVE-2024-44192, CVE-2024-54467, CVE-2024-54551, CVE-2025-24189, CVE-2025-24208, CVE-2025-24209, CVE-2025-24216, and CVE-2025-30427. The vulnerabilities involve processing maliciously crafted web content leading to unexpected process crashes, denial-of-service, cross-site scripting attacks via malicious iframes, and cross-origin data exfiltration. The advisory targets Red Hat Enterprise Linux 8.2 AUS and provides updated packages to remediate these issues. No CVSS scores are provided in the advisory, but the severity is rated as Important by Red Hat.

Successful exploitation of these vulnerabilities could lead to denial-of-service conditions through process crashes, unauthorized data exfiltration across origins, and cross-site scripting attacks. These impacts could compromise the confidentiality and availability of affected systems running vulnerable versions of webkit2gtk3 on Red Hat Enterprise Linux 8.2 AUS. There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated webkit2gtk3 packages for Red Hat Enterprise Linux 8.2 AUS to address these vulnerabilities. Users should apply this security update after ensuring all previous errata relevant to their system are applied. A system reboot may be required for the update to take effect. No additional mitigation steps are indicated by the vendor advisory.