Threat Intelligence Database

CVE-2026-28847 is a high-severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected process crash. The issue is related to improper memory handling and affects multiple Apple platforms including Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. The vulnerability has been addressed with improved memory handling and fixed in Safari 26.5 and corresponding OS versions 18.7.9 and 26.5. Red Hat has also issued security updates for webkitgtk4 in Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this and related vulnerabilities. The CVSS score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.

Multiple security vulnerabilities have been identified in webkit2gtk3, the GTK port of the WebKit web rendering engine. These include several issues where processing maliciously crafted web content may cause unexpected crashes in Safari or other processes, as well as a vulnerability allowing websites to access sensor information without user consent. Red Hat has issued an important security update for Red Hat Enterprise Linux 9 to address these issues.

Red Hat has issued a security advisory for webkit2gtk3 addressing two vulnerabilities in WebKitGTK, the WebKit port for the GTK platform. The first vulnerability (CVE-2025-31205) allows a malicious website to exfiltrate data across origins. The second vulnerability (CVE-2025-31257) can cause an unexpected crash of Safari when processing maliciously crafted web content. These issues have been rated as important by Red Hat Product Security. Updates are available for Red Hat Enterprise Linux 8.8 variants to address these vulnerabilities.

Red Hat has issued a security advisory for webkit2gtk3 addressing two vulnerabilities in WebKitGTK, the WebKit port for GTK. The first vulnerability (CVE-2025-31205) allows a malicious website to exfiltrate data across origins. The second (CVE-2025-31257) can cause an unexpected crash in Safari when processing maliciously crafted web content. These issues have been rated as important by Red Hat. An update is available for affected Red Hat Enterprise Linux 8.4 variants to remediate these vulnerabilities.

Red Hat has issued a security advisory for webkit2gtk3 addressing two vulnerabilities in WebKitGTK, the WebKit port for the GTK platform. The first vulnerability (CVE-2025-31205) allows a malicious website to exfiltrate data cross-origin. The second (CVE-2025-31257) can cause an unexpected Safari crash when processing maliciously crafted web content. These issues affect Red Hat Enterprise Linux 8 across multiple architectures. An update to webkit2gtk3 version 2.48.2-1.el8_10 resolves these vulnerabilities.

Two security vulnerabilities have been identified in webkit2gtk3, the GTK port of the WebKit rendering engine. The first vulnerability (CVE-2025-31205) allows a malicious website to exfiltrate data across origins. The second vulnerability (CVE-2025-31257) can cause an unexpected crash in Safari when processing maliciously crafted web content. Red Hat has released an important security update addressing these issues for Red Hat Enterprise Linux 9 and its variants. Users are advised to apply the update to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified in WebKitGTK, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 9. These include issues that may cause unexpected process crashes, denial-of-service conditions, cross-site scripting attacks, and cross-origin data exfiltration. The vulnerabilities are addressed in an important security update provided by Red Hat. Users of affected Red Hat Enterprise Linux 9 variants should apply the update to mitigate these risks.

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: out-of-bounds write vulnerability (CVE-2025-24201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat has issued a security advisory for webkit2gtk3 addressing two vulnerabilities in WebKitGTK, the GTK port of the WebKit rendering engine. The first vulnerability (CVE-2024-54543) may lead to memory corruption when processing maliciously crafted web content. The second vulnerability (CVE-2025-24162) may cause an unexpected process crash under similar conditions. These issues affect Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. An update to webkit2gtk3 version 2.46.6-1.el9_2 has been released to address these vulnerabilities.

Red Hat has issued a security advisory for webkit2gtk3 addressing two vulnerabilities in WebKitGTK, the WebKit port for the GTK platform. The vulnerabilities include CVE-2024-54543, which may lead to memory corruption when processing maliciously crafted web content, and CVE-2025-24162, which may cause an unexpected process crash under similar conditions. The update is rated as Important by Red Hat and affects Red Hat Enterprise Linux 8.8 Extended Update Support versions. A security update package is available to remediate these issues.