Search CVE reports
61 – 70 of 834 results
Some fixes available 3 of 18
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.
5 affected packages
qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Fixed | Fixed | Ignored | Ignored | Ignored |
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Some fixes available 3 of 18
A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and...
5 affected packages
qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Fixed | Fixed | Ignored | Ignored | Ignored |
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
6 affected packages
chromium-browser, webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | Not affected | Not affected | Not affected | — | — |
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Vulnerable | Vulnerable | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Some fixes available 2 of 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted...
5 affected packages
qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qtwebkit-opensource-src | — | Ignored | Ignored | Ignored | Ignored |
| qtwebkit-source | — | Not in release | Not in release | — | Ignored |
| webkit2gtk | — | Fixed | Fixed | Ignored | Ignored |
| webkitgtk | — | Not in release | Not in release | — | Ignored |
| wpewebkit | — | Not in release | Ignored | Ignored | — |
Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
6 affected packages
chromium-browser, webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | Not affected | Not affected | Not affected | — | — |
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Vulnerable | Vulnerable | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)
6 affected packages
chromium-browser, webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | Not affected | Not affected | Not affected | — | — |
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Vulnerable | Vulnerable | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)
6 affected packages
chromium-browser, webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | Not affected | Not affected | Not affected | — | — |
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Vulnerable | Vulnerable | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Some fixes available 2 of 17
This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions.
5 affected packages
webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Not affected | Fixed | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Some fixes available 2 of 17
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.
5 affected packages
webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Not affected | Fixed | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |
Some fixes available 2 of 17
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may...
5 affected packages
webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| webkitgtk | Not in release | Not in release | Not in release | — | Ignored |
| webkit2gtk | Not affected | Fixed | Ignored | Ignored | Ignored |
| qtwebkit-source | Not in release | Not in release | Not in release | — | Ignored |
| qtwebkit-opensource-src | Not in release | Ignored | Ignored | Ignored | Ignored |
| wpewebkit | Not in release | Not in release | Ignored | Ignored | — |