{"cves":[{"id":"CVE-2026-64787","published":"2026-08-21T00:00:00","updated_at":"2026-09-17T01:03:37.419944+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1\nand iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27.\nProcessing maliciously crafted web content may lead to an unexpected\nprocess termination.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64787","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-64783","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:40.311393+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6,\nvisionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may\nlead to an unexpected Safari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64783","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-64757","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nA memory corruption issue was addressed with improved state management.\nThis issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS\n26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6.\nProcessing maliciously crafted web content may lead to an unexpected Safari\ncrash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64757","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-64730","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:40.311393+00:00","description":"\nThe issue was addressed with improved UI. This issue is fixed in Safari\n26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6,\nwatchOS 26.6. Visiting a website that frames malicious content may lead to\nUI spoofing.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64730","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-64728","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nA permissions issue was addressed with improved validation. This issue is\nfixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS\n26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may\nviolate iframe sandboxing policy.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64728","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-64719","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:40.311393+00:00","description":"\nAn out-of-bounds access issue was addressed with improved bounds checking.\nThis issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS\n26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS\n26.6. Processing maliciously crafted web content may lead to an unexpected\nSafari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64719","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-64713","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nThis issue was addressed with improved checks. This issue is fixed in\nSafari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6,\nvisionOS 26.6, watchOS 26.6. Websites may know if the user has visited a\ngiven link.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-64713","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-63385","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:06:24.743192+00:00","description":"\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha,\nlibevent has two HTTP parsing weaknesses in http.c.\nevhttp_decode_uri_internal decodes percent-encoded %00 bytes into literal\nNUL characters, which can cause downstream C string operations to truncate\na path and bypass validation performed on a different representation.\nevhttp_header_is_valid_value also accepts obsolete line folding in header\nvalues containing carriage return or line feed characters, allowing a proxy\nand libevent to interpret headers differently and enabling header injection\nor access control bypass. The CRLF header acceptance is fixed in versions\n2.1.13 and 2.2.2-alpha, but the reviewed patches do not clearly remediate\nthe URI NUL-truncation condition.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"}},"baseScore":9.2,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-63385","https://ubuntu.com/security/notices/USN-8710-1"],"bugs":[""],"patches":{"libevent":["upstream: https://github.com/libevent/libevent/commit/9170dd35e64714613e8d13b290587cfc28e258e2"]},"tags":{},"packages":[{"name":"libevent","source":"https://ubuntu.com/security/cve?package=libevent","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libevent","debian":"https://tracker.debian.org/pkg/libevent","statuses":[{"release_codename":"bionic","status":"released","description":"2.1.8-stable-4ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2.1.11-stable-1ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2.1.12-stable-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.1.12-stable-9ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.1.12-stable-10ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.0.21-stable-1ubuntu1.14.04.2+esm1","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"upstream","status":"released","description":"2.1.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.0.21-stable-2ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8710-1"],"notices":[{"id":"USN-8710-1","title":"libevent vulnerabilities","summary":"Several security issues were fixed in libevent.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-09-01T15:27:40.186494","description":"Alexis Challande discovered that libevent incorrectly handled certain\nempty output buffers. An attacker could possibly use this issue to\ntrigger a use-after-free, resulting in a denial of service or arbitrary\ncode execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-63381)\n\nRajat Raghav discovered that libevent incorrectly handled certain HTTP\nrequests. An attacker could possibly use this issue to desynchronize\nHTTP request boundaries, resulting in HTTP request smuggling.\n(CVE-2026-63382)\n\nQiu Sihao discovered that libevent incorrectly handled certain malformed\ntagged RPC data. An attacker could possibly use this issue to trigger an\nout-of-bounds read, resulting in a denial of service. (CVE-2026-63383)\n\nQiu Sihao discovered that libevent incorrectly handled certain large\npayload lengths in tagged RPC data. An attacker could possibly use this\nissue to consume excessive system resources, resulting in a denial of\nservice. (CVE-2026-63384)\n\nAsaf Meizner discovered that libevent incorrectly handled certain HTTP\nURIs and header values. An attacker could possibly use this issue to\ncause HTTP messages to be interpreted inconsistently, resulting in\nsecurity restrictions being bypassed. (CVE-2026-63385)","is_hidden":false,"release_packages":{"bionic":[{"name":"libevent","version":"2.1.8-stable-4ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libevent","version":"2.1.11-stable-1ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"libevent","version":"2.1.12-stable-1ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"}],"noble":[{"name":"libevent","version":"2.1.12-stable-9ubuntu2.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"}],"resolute":[{"name":"libevent","version":"2.1.12-stable-10ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"}],"trusty":[{"name":"libevent","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"libevent","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-63385","CVE-2026-63381","CVE-2026-63382","CVE-2026-63384","CVE-2026-63383"]}]},{"id":"CVE-2026-63384","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:05:02.167454+00:00","description":"\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha,\nlibevent has an incorrect integer conversion in event_tagging.c when\nevtag_unmarshal_header uses evtag_decode_int to decode an\nattacker-controlled uint32 payload length and returns it as a signed int.\nValues above INT_MAX become negative or truncated, and\nevtag_unmarshal_string can use the converted value in allocation sizing,\nproducing a wrapped large allocation request and denial of service. This\nissue is fixed in versions 2.1.13 and 2.2.2-alpha.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.7,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-63384","https://ubuntu.com/security/notices/USN-8710-1"],"bugs":[""],"patches":{"libevent":["upstream: https://github.com/libevent/libevent/commit/5e3c6ebe342b34c5a9bcf48e9a32ad6708b9c416"]},"tags":{},"packages":[{"name":"libevent","source":"https://ubuntu.com/security/cve?package=libevent","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libevent","debian":"https://tracker.debian.org/pkg/libevent","statuses":[{"release_codename":"bionic","status":"released","description":"2.1.8-stable-4ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2.1.11-stable-1ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2.1.12-stable-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.1.12-stable-9ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.1.12-stable-10ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.0.21-stable-1ubuntu1.14.04.2+esm1","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"upstream","status":"released","description":"2.1.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.0.21-stable-2ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8710-1"],"notices":[{"id":"USN-8710-1","title":"libevent vulnerabilities","summary":"Several security issues were fixed in libevent.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-09-01T15:27:40.186494","description":"Alexis Challande discovered that libevent incorrectly handled certain\nempty output buffers. An attacker could possibly use this issue to\ntrigger a use-after-free, resulting in a denial of service or arbitrary\ncode execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-63381)\n\nRajat Raghav discovered that libevent incorrectly handled certain HTTP\nrequests. An attacker could possibly use this issue to desynchronize\nHTTP request boundaries, resulting in HTTP request smuggling.\n(CVE-2026-63382)\n\nQiu Sihao discovered that libevent incorrectly handled certain malformed\ntagged RPC data. An attacker could possibly use this issue to trigger an\nout-of-bounds read, resulting in a denial of service. (CVE-2026-63383)\n\nQiu Sihao discovered that libevent incorrectly handled certain large\npayload lengths in tagged RPC data. An attacker could possibly use this\nissue to consume excessive system resources, resulting in a denial of\nservice. (CVE-2026-63384)\n\nAsaf Meizner discovered that libevent incorrectly handled certain HTTP\nURIs and header values. An attacker could possibly use this issue to\ncause HTTP messages to be interpreted inconsistently, resulting in\nsecurity restrictions being bypassed. (CVE-2026-63385)","is_hidden":false,"release_packages":{"bionic":[{"name":"libevent","version":"2.1.8-stable-4ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libevent","version":"2.1.11-stable-1ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"libevent","version":"2.1.12-stable-1ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"}],"noble":[{"name":"libevent","version":"2.1.12-stable-9ubuntu2.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"}],"resolute":[{"name":"libevent","version":"2.1.12-stable-10ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"}],"trusty":[{"name":"libevent","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"libevent","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-63385","CVE-2026-63381","CVE-2026-63382","CVE-2026-63384","CVE-2026-63383"]}]},{"id":"CVE-2026-63383","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:06:11.481187+00:00","description":"\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha,\nlibevent can read beyond a contiguous evbuffer region in event_tagging.c\nwhen decode_tag_internal requests at most five bytes from evbuffer_pullup\nbut iterates using the full logical buffer length. A fragmented evbuffer\ncontaining a six-byte malformed tag can therefore advance past the pullup\nwindow and trigger an out-of-bounds read, which can crash a process that\ndecodes attacker-controlled tagged RPC data. This issue is fixed in\nversions 2.1.13 and 2.2.2-alpha.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.7,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-63383","https://ubuntu.com/security/notices/USN-8710-1"],"bugs":[""],"patches":{"libevent":["upstream: https://github.com/libevent/libevent/commit/e1f9e21887c6b104e206a718385ba3ffc75180cb"]},"tags":{},"packages":[{"name":"libevent","source":"https://ubuntu.com/security/cve?package=libevent","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libevent","debian":"https://tracker.debian.org/pkg/libevent","statuses":[{"release_codename":"bionic","status":"released","description":"2.1.8-stable-4ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2.1.12-stable-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.1.11-stable-1ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"noble","status":"released","description":"2.1.12-stable-9ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.1.12-stable-10ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.0.21-stable-1ubuntu1.14.04.2+esm1","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"upstream","status":"released","description":"2.1.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.0.21-stable-2ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8710-1"],"notices":[{"id":"USN-8710-1","title":"libevent vulnerabilities","summary":"Several security issues were fixed in libevent.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-09-01T15:27:40.186494","description":"Alexis Challande discovered that libevent incorrectly handled certain\nempty output buffers. An attacker could possibly use this issue to\ntrigger a use-after-free, resulting in a denial of service or arbitrary\ncode execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-63381)\n\nRajat Raghav discovered that libevent incorrectly handled certain HTTP\nrequests. An attacker could possibly use this issue to desynchronize\nHTTP request boundaries, resulting in HTTP request smuggling.\n(CVE-2026-63382)\n\nQiu Sihao discovered that libevent incorrectly handled certain malformed\ntagged RPC data. An attacker could possibly use this issue to trigger an\nout-of-bounds read, resulting in a denial of service. (CVE-2026-63383)\n\nQiu Sihao discovered that libevent incorrectly handled certain large\npayload lengths in tagged RPC data. An attacker could possibly use this\nissue to consume excessive system resources, resulting in a denial of\nservice. (CVE-2026-63384)\n\nAsaf Meizner discovered that libevent incorrectly handled certain HTTP\nURIs and header values. An attacker could possibly use this issue to\ncause HTTP messages to be interpreted inconsistently, resulting in\nsecurity restrictions being bypassed. (CVE-2026-63385)","is_hidden":false,"release_packages":{"bionic":[{"name":"libevent","version":"2.1.8-stable-4ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libevent","version":"2.1.11-stable-1ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"libevent","version":"2.1.12-stable-1ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"}],"noble":[{"name":"libevent","version":"2.1.12-stable-9ubuntu2.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"}],"resolute":[{"name":"libevent","version":"2.1.12-stable-10ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"}],"trusty":[{"name":"libevent","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"libevent","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-63385","CVE-2026-63381","CVE-2026-63382","CVE-2026-63384","CVE-2026-63383"]}]},{"id":"CVE-2026-63382","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:05:02.167454+00:00","description":"\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha,\nthe libevent evhttp parser in http.c inconsistently handles duplicate\nTransfer-Encoding headers, comma-separated Transfer-Encoding values, and\nbare line feeds in chunked framing. evhttp_find_header can select only the\nfirst header, evhttp_check_transfer_encoding_ was absent so the previous\nwhole-string comparison fails to recognize valid lists ending in chunked,\nand evhttp_handle_chunked_read uses EVBUFFER_EOL_CRLF rather than\nEVBUFFER_EOL_CRLF_STRICT, accepting bare LF chunk terminators. When\nlibevent is deployed behind a proxy that frames the same request\ndifferently, an unauthenticated remote attacker can desynchronize request\nboundaries and smuggle a second request, potentially bypassing access\ncontrols or poisoning caches. This issue is fixed in versions 2.1.13 and\n2.2.2-alpha.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"}},"baseScore":9.2,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-63382","https://ubuntu.com/security/notices/USN-8710-1"],"bugs":[""],"patches":{"libevent":["upstream: https://github.com/libevent/libevent/commit/10abb34b8dc3e1184de315dd261ce4b77563cda6","upstream: https://github.com/libevent/libevent/commit/ac38703b2d312200c4f967f02936af0118d384a0"]},"tags":{},"packages":[{"name":"libevent","source":"https://ubuntu.com/security/cve?package=libevent","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libevent","debian":"https://tracker.debian.org/pkg/libevent","statuses":[{"release_codename":"bionic","status":"released","description":"2.1.8-stable-4ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"2.1.13","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.1.11-stable-1ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2.1.12-stable-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.1.12-stable-9ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.1.12-stable-10ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.0.21-stable-1ubuntu1.14.04.2+esm1","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"2.0.21-stable-2ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8710-1"],"notices":[{"id":"USN-8710-1","title":"libevent vulnerabilities","summary":"Several security issues were fixed in libevent.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-09-01T15:27:40.186494","description":"Alexis Challande discovered that libevent incorrectly handled certain\nempty output buffers. An attacker could possibly use this issue to\ntrigger a use-after-free, resulting in a denial of service or arbitrary\ncode execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-63381)\n\nRajat Raghav discovered that libevent incorrectly handled certain HTTP\nrequests. An attacker could possibly use this issue to desynchronize\nHTTP request boundaries, resulting in HTTP request smuggling.\n(CVE-2026-63382)\n\nQiu Sihao discovered that libevent incorrectly handled certain malformed\ntagged RPC data. An attacker could possibly use this issue to trigger an\nout-of-bounds read, resulting in a denial of service. (CVE-2026-63383)\n\nQiu Sihao discovered that libevent incorrectly handled certain large\npayload lengths in tagged RPC data. An attacker could possibly use this\nissue to consume excessive system resources, resulting in a denial of\nservice. (CVE-2026-63384)\n\nAsaf Meizner discovered that libevent incorrectly handled certain HTTP\nURIs and header values. An attacker could possibly use this issue to\ncause HTTP messages to be interpreted inconsistently, resulting in\nsecurity restrictions being bypassed. (CVE-2026-63385)","is_hidden":false,"release_packages":{"bionic":[{"name":"libevent","version":"2.1.8-stable-4ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libevent","version":"2.1.11-stable-1ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"libevent","version":"2.1.12-stable-1ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"}],"noble":[{"name":"libevent","version":"2.1.12-stable-9ubuntu2.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"}],"resolute":[{"name":"libevent","version":"2.1.12-stable-10ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"}],"trusty":[{"name":"libevent","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"libevent","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-63385","CVE-2026-63381","CVE-2026-63382","CVE-2026-63384","CVE-2026-63383"]}]},{"id":"CVE-2026-63381","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:04:39.102492+00:00","description":"\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha,\nlibevent has a use-after-free in buffer.c when\nevbuffer_add_buffer_reference processes an output buffer whose\nout_total_len is zero. evbuffer_free_all_chains frees the initial empty\nchain without resetting outbuf->first, outbuf->last, or\noutbuf->last_with_datap, and APPEND_CHAIN_MULTICAST subsequently\ndereferences the dangling chain pointer. A caller that can drive this\nbuffer state can cause memory corruption or a process crash. This issue is\nfixed in versions 2.1.13 and 2.2.2-alpha.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-63381","https://ubuntu.com/security/notices/USN-8710-1"],"bugs":[""],"patches":{"libevent":["upstream: https://github.com/libevent/libevent/commit/5cb95ba2f804f8aff46f88d58391c71e1251cd1c"]},"tags":{},"packages":[{"name":"libevent","source":"https://ubuntu.com/security/cve?package=libevent","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libevent","debian":"https://tracker.debian.org/pkg/libevent","statuses":[{"release_codename":"bionic","status":"released","description":"2.1.8-stable-4ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2.1.11-stable-1ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2.1.12-stable-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.1.12-stable-9ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.1.12-stable-10ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":["USN-8710-1"],"notices":[{"id":"USN-8710-1","title":"libevent vulnerabilities","summary":"Several security issues were fixed in libevent.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-09-01T15:27:40.186494","description":"Alexis Challande discovered that libevent incorrectly handled certain\nempty output buffers. An attacker could possibly use this issue to\ntrigger a use-after-free, resulting in a denial of service or arbitrary\ncode execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-63381)\n\nRajat Raghav discovered that libevent incorrectly handled certain HTTP\nrequests. An attacker could possibly use this issue to desynchronize\nHTTP request boundaries, resulting in HTTP request smuggling.\n(CVE-2026-63382)\n\nQiu Sihao discovered that libevent incorrectly handled certain malformed\ntagged RPC data. An attacker could possibly use this issue to trigger an\nout-of-bounds read, resulting in a denial of service. (CVE-2026-63383)\n\nQiu Sihao discovered that libevent incorrectly handled certain large\npayload lengths in tagged RPC data. An attacker could possibly use this\nissue to consume excessive system resources, resulting in a denial of\nservice. (CVE-2026-63384)\n\nAsaf Meizner discovered that libevent incorrectly handled certain HTTP\nURIs and header values. An attacker could possibly use this issue to\ncause HTTP messages to be interpreted inconsistently, resulting in\nsecurity restrictions being bypassed. (CVE-2026-63385)","is_hidden":false,"release_packages":{"bionic":[{"name":"libevent","version":"2.1.8-stable-4ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-6","version":"2.1.8-stable-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libevent","version":"2.1.11-stable-1ubuntu0.1~esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-core-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-dev","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-extra-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-openssl-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"},{"name":"libevent-pthreads-2.1-7","version":"2.1.11-stable-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"libevent","version":"2.1.12-stable-1ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7","version":"2.1.12-stable-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-1ubuntu0.1","pocket":"security"}],"noble":[{"name":"libevent","version":"2.1.12-stable-9ubuntu2.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-9ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-9ubuntu2.1","pocket":"security"}],"resolute":[{"name":"libevent","version":"2.1.12-stable-10ubuntu0.1","description":"Event notification library","is_source":true},{"name":"libevent-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-core-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-dev","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-extra-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-openssl-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"},{"name":"libevent-pthreads-2.1-7t64","version":"2.1.12-stable-10ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":"https://launchpad.net/ubuntu/+source/libevent/2.1.12-stable-10ubuntu0.1","pocket":"security"}],"trusty":[{"name":"libevent","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-1ubuntu1.14.04.2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"libevent","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","description":"Event notification library","is_source":true},{"name":"libevent-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-core-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-dev","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-extra-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-openssl-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libevent-pthreads-2.0-5","version":"2.0.21-stable-2ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libevent","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-63385","CVE-2026-63381","CVE-2026-63382","CVE-2026-63384","CVE-2026-63383"]}]},{"id":"CVE-2026-43804","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nThis issue was addressed through improved state management. This issue is\nfixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS\n26.6. Visiting a website may lead to an app denial-of-service.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43804","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43745","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:40.311393+00:00","description":"\nAn out-of-bounds write issue was addressed with improved input validation.\nThis issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS\n26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6,\nwatchOS 26.6. Processing maliciously crafted web content may lead to an\nunexpected Safari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43745","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43742","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2\nand iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS\n26.6. Processing maliciously crafted web content may lead to an unexpected\nprocess crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43742","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43740","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nThe issue was addressed with improved memory handling. This issue is fixed\nin Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS\n26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web\ncontent may result in the disclosure of process memory.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43740","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43734","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2\nand iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS\n26.6. Processing maliciously crafted web content may lead to an unexpected\nprocess crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43734","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43732","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nA path handling issue was addressed with improved validation. This issue is\nfixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2,\ntvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web\ncontent may disclose sensitive user information.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43732","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43731","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2\nand iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS\n26.6. Processing maliciously crafted web content may lead to memory\ncorruption.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43731","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43727","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:40.311393+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2\nand iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6.\nProcessing maliciously crafted web content may lead to an unexpected Safari\ncrash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43727","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]}],"offset":3360,"limit":20,"total_results":79316}