wid-sec-w-2026-0782 · Published 2026-03-18 · View on BSI CERT-Bund ↗

WebKitGTK: Multiple Vulnerabilities

CVSS 8.8 HIGH CISA KEV — Known Exploited

Risk Summary

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

CVEs (17)

CVE-2023-43010 CVE-2025-31223 CVE-2025-31277 CVE-2025-43213 CVE-2025-43214 CVE-2025-43511 CVE-2025-43433 CVE-2025-43438 CVE-2025-43441 CVE-2025-43457 CVE-2026-20608 CVE-2026-20635 CVE-2026-20636 CVE-2026-20644 CVE-2026-20652 CVE-2026-20676 CVE-2025-46299

Affected Vendors

Amazon Debian Open Source SUSE

Affected Products (12)

Open Source · WebKitGTK <2.44.0

Open Source · WebKitGTK 2.44.0

Open Source · WebKitGTK <2.50.0

Open Source · WebKitGTK 2.50.0

Open Source · WebKitGTK <2.50.5

Open Source · WebKitGTK 2.50.5

Open Source · WebKitGTK <2.50.2

Open Source · WebKitGTK 2.50.2

Open Source · WebKitGTK <2.50.6

Open Source · WebKitGTK 2.50.6

Open Source · WebKitGTK <2.52.0

Open Source · WebKitGTK 2.52.0

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more