RHSA-2026:91631 — Security Advisory

Red Hat Security Advisory: webkitgtk4 security update

Loading…

Severity

Critical

Red Hat Product Security

RHEL 7

Products

Official CSAF product identity

Published · October 28, 2026

Updated · November 2, 2026

Topic

An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.

Security Fix(es):

chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-4464)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-4452)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-4448)
chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-5283)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-5275)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-5277)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-5868)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-6296)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7340)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-7359)
chromium-browser: angle: Out of bounds read and write in Angle (CVE-2026-7354)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-7901)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7903)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-7900)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)
chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)
chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)
chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)
chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)
chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9915)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9932)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9904)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-10018)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9879)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9899)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9940)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9965)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9877)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9946)
chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9882)
chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-9910)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9908)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9944)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9953)
chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-9975)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9982)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9914)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9941)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-10019)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9878)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-9901)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9900)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9969)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9935)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9911)
chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9913)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9942)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9916)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-11113)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10889)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-10994)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11088)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-10919)
chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-10999)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11111)
chromium-browser: angle: Type Confusion in ANGLE (CVE-2026-10955)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-10974)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11104)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11087)
chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-11191)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-11055)
chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-10881)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10930)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11005)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-10907)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11004)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-11040)
chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-10929)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-10913)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11090)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11268)
chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11044)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-11065)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-10883)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11110)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-11043)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11123)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11109)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-10914)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11138)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11051)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11061)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10979)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11137)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-11066)
chromium-browser: angle: Use after free in ANGLE (CVE-2026-14044)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13780)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-14125)
chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-13859)
chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-13833)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13834)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14152)
chromium-browser: angle: Type Confusion in ANGLE (CVE-2026-13883)
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13877)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-13975)
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-13819)
chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-14400)
chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14396)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14401)
chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-14385)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14390)
chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14388)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14425)
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14397)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14398)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14418)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14382)
chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-14391)
chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14384)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14402)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14413)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14411)
chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14386)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14412)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-15109)
chromium-browser: angle: Chromium: Sandbox escape via out-of-bounds write in ANGLE (CVE-2026-16413)
chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access (CVE-2026-16419)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17832)
chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17683)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17718)
chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17721)
chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17676)
chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17675)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17847)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17811)
chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-17801)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17667)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17704)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17750)
chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17691)
chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17701)
chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-17717)
chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17678)
chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-17687)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17668)
chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17695)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17740)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17655)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17790)
chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17891)
chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17677)
chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-17682)
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17671)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17714)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17785)
chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-17697)
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17689)
chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android (CVE-2026-19157)
ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page (CVE-2026-76046)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-78989)
ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability (CVE-2026-79149)
chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE (CVE-2026-79138)
chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML (CVE-2026-78905)
chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource (CVE-2026-79120)
chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE (CVE-2026-79118)
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation (CVE-2026-79230)
chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page (CVE-2026-78904)
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79240)
chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79019)
chromium-browser: angle: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE (CVE-2026-79270)
chromium-browser: angle: ANGLE: Arbitrary code execution via use after free (CVE-2026-79275)
chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-78978)
chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource (CVE-2026-78965)
chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79188)
chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page (CVE-2026-79043)
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-79282)
chromium-browser: angle: Chromium: Information disclosure via uninitialized resource in ANGLE (CVE-2026-79229)
chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE (CVE-2026-79131)
chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE (CVE-2026-79269)
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79127)
chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79189)
chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page (CVE-2026-79142)
chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-79048)
chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource (CVE-2026-79285)
chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79130)
chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing (CVE-2026-78906)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)
webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.