RHSA-2026:27728 — Security Advisory

Red Hat Security Advisory: webkitgtk4 security update

Loading…

Severity

Important

Red Hat Product Security

RHEL 7

Products

Official CSAF product identity

Published · June 22, 2026

Updated · November 2, 2026

Topic

An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.

Security Fix(es):

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)
webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.