{"cves":[{"id":"CVE-2026-43726","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2\nand iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS\n26.6. Processing maliciously crafted web content may lead to an unexpected\nprocess crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43726","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43725","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nThe issue was addressed with improved input validation. This issue is fixed\nin Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS\n26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A\nmalicious website may be able to process restricted web content outside the\nsandbox.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":7.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43725","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43721","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nThis issue was addressed through improved state management. This issue is\nfixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2,\ntvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to\nsilently hijack clipboard data.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43721","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43720","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2\nand iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS\n26.6. Processing maliciously crafted web content may lead to an unexpected\nSafari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43720","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43716","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:07.446596+00:00","description":"\nThe issue was addressed with improved memory handling. This issue is fixed\nin Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2.\nProcessing maliciously crafted web content may lead to an unexpected Safari\ncrash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43716","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43715","published":"2026-08-21T00:00:00","updated_at":"2026-09-17T01:01:32.222851+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and\niPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6.\nProcessing maliciously crafted web content may lead to memory corruption.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43715","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43713","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T12:29:24.483746+00:00","description":"\nA permissions issue was addressed with additional restrictions. This issue\nis fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe\n26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak\nsensitive data.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43713","https://webkitgtk.org/security/WSA-2026-0004.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43660","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:05:28.156375+00:00","description":"\nA validation issue was addressed with improved logic. This issue is fixed\nin Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5,\nmacOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing\nmaliciously crafted web content may prevent Content Security Policy from\nbeing enforced.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43660","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-43658","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:05:41.490998+00:00","description":"\nThe issue was addressed with improved memory handling. This issue is fixed\nin Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5,\nmacOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing\nmaliciously crafted web content may lead to an unexpected Safari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-43658","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-28984","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:02:30.291711+00:00","description":"\nThe issue was addressed with improved memory handling. This issue is fixed\nin Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5,\nmacOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing\nmaliciously crafted web content may lead to an unexpected Safari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-28984","https://webkitgtk.org/security/WSA-2026-0005.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-28958","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:02:22.967859+00:00","description":"\nThis issue was addressed with improved data protection. This issue is fixed\nin Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5,\nmacOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive\nuser data.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-28958","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-28955","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:03:46.573248+00:00","description":"\nThe issue was addressed with improved memory handling. This issue is fixed\nin Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5,\nmacOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing\nmaliciously crafted web content may lead to an unexpected process crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-28955","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-28953","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:02:50.795094+00:00","description":"\nThe issue was addressed with improved memory handling. This issue is fixed\nin Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5,\nmacOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing\nmaliciously crafted web content may lead to an unexpected process crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-28953","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-28947","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:02:07.132731+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and\niPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5.\nProcessing maliciously crafted web content may lead to an unexpected Safari\ncrash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-28947","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-28946","published":"2026-08-21T00:00:00","updated_at":"2026-09-02T21:01:42.994409+00:00","description":"\nA use-after-free issue was addressed with improved memory management. This\nissue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously\ncrafted web content may lead to an unexpected Safari crash.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"},{"author":"mdeslaur","note":"It is no longer possible to build new webkit2gtk versions on\njammy and earlier. Marking as ignored.\nwpewebkit isn't used by anything of importance in the archive,\nexcept for cog, an example container for wpewebkit. There is no\npoint in attempting to backport newer wpewebkit versions to the\narchive. As such, marking as ignored.\nIt is not feasible to fix webkitgtk, qtwebkit-source, and\nqtwebkit-opensource-src. Marking them as ignored."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-28946","https://webkitgtk.org/security/WSA-2026-0003.html","https://ubuntu.com/security/notices/USN-8703-1"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.52.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.52.6-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.52.6-0ubuntu0.26.04.1","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8703-1"],"notices":[{"id":"USN-8703-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.","references":[],"published":"2026-08-31T12:46:51.507087","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","is_hidden":false,"release_packages":{"noble":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.24.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.52.6-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"webkit2gtk","version":"2.52.6-0ubuntu0.26.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit-6.0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-1","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-bin","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-4","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-6.0-dev","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwebkitgtk-doc","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"},{"name":"webkitgtk-webdriver","version":"2.52.6-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.52.6-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-43742","CVE-2026-43713","CVE-2026-43707","CVE-2026-28955","CVE-2026-64719","CVE-2026-43701","CVE-2026-39872","CVE-2026-43732","CVE-2026-43745","CVE-2026-64783","CVE-2026-28947","CVE-2026-43663","CVE-2026-43804","CVE-2026-43715","CVE-2026-43712","CVE-2026-28984","CVE-2026-43727","CVE-2026-28905","CVE-2026-28907","CVE-2026-43731","CVE-2026-43658","CVE-2026-28946","CVE-2026-43716","CVE-2026-28958","CVE-2026-28901","CVE-2026-43699","CVE-2026-64713","CVE-2026-28903","CVE-2026-64787","CVE-2026-28904","CVE-2026-28902","CVE-2026-43705","CVE-2026-43660","CVE-2026-28847","CVE-2026-43740","CVE-2026-64730","CVE-2026-28942","CVE-2026-43676","CVE-2026-28953","CVE-2026-43734","CVE-2026-64728","CVE-2026-43725","CVE-2026-43721","CVE-2026-43720","CVE-2026-64757","CVE-2026-28883","CVE-2026-43726"]}]},{"id":"CVE-2026-77648","published":"2026-08-20T23:16:00","updated_at":"2026-09-02T21:10:19.045024+00:00","description":"\nIn OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import\ntasks that\nbypass import_filtering_opts, allowing an admin to fetch internal\nURLs from the Glance service network (aka SSRF), as long as https:// or\nhttp:// is used. This API has been available only to admins since Xena, and\nit has been deprecated for several releases.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":2.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.2,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-77648","https://wiki.openstack.org/wiki/OSSN/OSSN-0105","https://bugs.launchpad.net/glance/+bug/2152110"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144212"],"patches":{"glance":[]},"tags":{},"packages":[{"name":"glance","source":"https://ubuntu.com/security/cve?package=glance","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=glance","debian":"https://tracker.debian.org/pkg/glance","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2:32.0.0-3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-77647","published":"2026-08-20T23:16:00","updated_at":"2026-09-02T21:11:36.803718+00:00","description":"\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute\narbitrary code, as exploited in the wild in August 2026. This is related to\nincorrect identification of <?php blocks, and var_export's mishandling of\ncertain cases such as presence of a '<' character.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-77647","https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-4-20.html"],"bugs":[""],"patches":{"spip":[]},"tags":{},"packages":[{"name":"spip","source":"https://ubuntu.com/security/cve?package=spip","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=spip","debian":"https://tracker.debian.org/pkg/spip","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.4.20+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-77643","published":"2026-08-20T22:18:00","updated_at":"2026-09-02T21:12:21.932724+00:00","description":"\nA cross-site scripting vulnerability in\nqueryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0\nand before 1.4.32 exists due to incomplete HTML escaping by\nXapian::MSet::snippet(). NOTE: this issue exists because of a missed corner\ncase of CVE-2018-0499.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-77643","https://lists.xapian.org/pipermail/xapian-devel/2026-August/003429.html","https://trac.xapian.org/wiki/SecurityFixes/2018-07-02#a2026-08-13update"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144490"],"patches":{"xapian-core":[]},"tags":{},"packages":[{"name":"xapian-core","source":"https://ubuntu.com/security/cve?package=xapian-core","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xapian-core","debian":"https://tracker.debian.org/pkg/xapian-core","statuses":[{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.32-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-77642","published":"2026-08-20T22:18:00","updated_at":"2026-09-02T21:12:40.918716+00:00","description":"\ntor before 0.4.9.9 was prone to an out-of-bounds write when parsing a\nconsensus or  detached signature with unexpected signature digest type.\nImpact  is minor for most Tor roles, but potentially major for directory\nauthorities. This is TROVE-2026-019.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-77642","https://gitlab.torproject.org/tpo/core/tor/-/work_items/41267"],"bugs":[""],"patches":{"tor":[]},"tags":{},"packages":[{"name":"tor","source":"https://ubuntu.com/security/cve?package=tor","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tor","debian":"https://tracker.debian.org/pkg/tor","statuses":[{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.4.9.9-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-72818","published":"2026-08-20T22:18:00","updated_at":"2026-09-02T21:09:27.849740+00:00","description":"\nThe URLS regular expression in nltk/tokenize/casual.py, compiled into\nTweetTokenizer.WORD_RE and applied by TweetTokenizer.tokenize, contains a\nnaked-domain branch whose domain-label prefix [a-z0-9]+(?:[.\\-][a-z0-9]+)*\nis unbounded. Input consisting of many alternating label separators can be\npartitioned in exponentially many ways, and because the branch also\nrequires a trailing top-level domain that such input never supplies, the\nengine explores those partitions before failing at each offset. A few\nkilobytes of input therefore consumes seconds to minutes of single-threaded\nCPU, and the HANG_RE substitution performed before matching does not\ncollapse the pattern. TweetTokenizer is intended for tokenizing untrusted\nsocial-media text, so any service that applies it, or the module-level\ncasual_tokenize, to submitted text can be stalled per request without\nauthentication. Version 3.10.1 bounds the label repetition.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.7,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-72818","https://github.com/nltk/nltk","https://pypi.org","https://github.com/cveproject/cvelistv5/tree/main/cves/2026/72xxx/cve-2026-72818.json","https://github.com/nltk/nltk/blob/3.9.4/nltk/tokenize/casual.py","https://github.com/nltk/nltk/issues/3704","https://github.com/nltk/nltk/releases/tag/v3.10.1","https://nvd.nist.gov/vuln/detail/cve-2026-72818","https://www.vulncheck.com/advisories/nltk-tweettokenizer-url-pattern-backtracks-catastrophically-on-naked-domain-like-input","https://github.com/nltk/nltk/commit/7808692d451b962711005d954859bb83aabcf8fa","https://security-tracker.debian.org/tracker/cve-2026-72818"],"bugs":[""],"patches":{"nltk":[]},"tags":{},"packages":[{"name":"nltk","source":"https://ubuntu.com/security/cve?package=nltk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nltk","debian":"https://tracker.debian.org/pkg/nltk","statuses":[{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":3380,"limit":20,"total_results":79316}