Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:91631 - Security Advisory
Issued:
2026-10-28
Updated:
2026-10-28

RHSA-2026:91631 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Critical: webkitgtk4 security update

Type/Severity

Security Advisory: Critical

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3.

Security Fix(es):

  • chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
  • chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-4464)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-4452)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-4448)
  • chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-5283)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-5275)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-5277)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-5868)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-6296)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7340)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-7359)
  • chromium-browser: angle: Out of bounds read and write in Angle (CVE-2026-7354)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-7901)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7903)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-7900)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)
  • chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)
  • chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)
  • chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)
  • chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)
  • chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9915)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9932)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9904)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-10018)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9879)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9899)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9940)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9965)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9877)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9946)
  • chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9882)
  • chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-9910)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9908)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9944)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9953)
  • chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-9975)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9982)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9914)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9941)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-10019)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9878)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-9901)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9900)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9969)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9935)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9911)
  • chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9913)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9942)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9916)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-11113)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10889)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-10994)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11088)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-10919)
  • chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-10999)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11111)
  • chromium-browser: angle: Type Confusion in ANGLE (CVE-2026-10955)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-10974)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11104)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11087)
  • chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-11191)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-11055)
  • chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-10881)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10930)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11005)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-10907)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11004)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-11040)
  • chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-10929)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-10913)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11090)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11268)
  • chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11044)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-11065)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-10883)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11110)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-11043)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11123)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11109)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-10914)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11138)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11051)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11061)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10979)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11137)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-11066)
  • chromium-browser: angle: Use after free in ANGLE (CVE-2026-14044)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13780)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-14125)
  • chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-13859)
  • chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-13833)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13834)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14152)
  • chromium-browser: angle: Type Confusion in ANGLE (CVE-2026-13883)
  • chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13877)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-13975)
  • chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-13819)
  • chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-14400)
  • chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14396)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14401)
  • chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-14385)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14390)
  • chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14388)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14425)
  • chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14397)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14398)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14418)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14382)
  • chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-14391)
  • chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14384)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14402)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14413)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14411)
  • chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14386)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14412)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-15109)
  • chromium-browser: angle: Chromium: Sandbox escape via out-of-bounds write in ANGLE (CVE-2026-16413)
  • chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access (CVE-2026-16419)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17832)
  • chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17683)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17718)
  • chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17721)
  • chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17676)
  • chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17675)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17847)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17811)
  • chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-17801)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17667)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17704)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17750)
  • chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17691)
  • chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17701)
  • chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-17717)
  • chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17678)
  • chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-17687)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17668)
  • chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17695)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17740)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17655)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17790)
  • chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17891)
  • chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17677)
  • chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-17682)
  • chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17671)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17714)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17785)
  • chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-17697)
  • chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17689)
  • chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android (CVE-2026-19157)
  • ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page (CVE-2026-76046)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
  • webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
  • webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
  • webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
  • webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
  • webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
  • chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-78989)
  • ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability (CVE-2026-79149)
  • chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE (CVE-2026-79138)
  • chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML (CVE-2026-78905)
  • chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource (CVE-2026-79120)
  • chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE (CVE-2026-79118)
  • chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation (CVE-2026-79230)
  • chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page (CVE-2026-78904)
  • chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79240)
  • chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79019)
  • chromium-browser: angle: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE (CVE-2026-79270)
  • chromium-browser: angle: ANGLE: Arbitrary code execution via use after free (CVE-2026-79275)
  • chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-78978)
  • chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource (CVE-2026-78965)
  • chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79188)
  • chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page (CVE-2026-79043)
  • chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-79282)
  • chromium-browser: angle: Chromium: Information disclosure via uninitialized resource in ANGLE (CVE-2026-79229)
  • chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE (CVE-2026-79131)
  • chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE (CVE-2026-79269)
  • chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79127)
  • chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79189)
  • chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page (CVE-2026-79142)
  • chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-79048)
  • chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource (CVE-2026-79285)
  • chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79130)
  • chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing (CVE-2026-78906)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
  • webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
  • webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
  • webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
  • webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)
  • webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2388151 - CVE-2025-8901 chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability
  • BZ - 2391109 - CVE-2025-9478 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2397874 - CVE-2025-10502 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2431128 - CVE-2026-0908 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2444613 - CVE-2026-3536 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2449382 - CVE-2026-4464 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2449388 - CVE-2026-4452 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2449406 - CVE-2026-4448 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2453681 - CVE-2026-5283 chromium-browser: angle: Inappropriate implementation in ANGLE
  • BZ - 2453693 - CVE-2026-5275 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2453696 - CVE-2026-5277 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2456737 - CVE-2026-5868 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2456779 - CVE-2026-5879 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2458783 - CVE-2026-6296 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2463664 - CVE-2026-7340 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2463670 - CVE-2026-7359 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2463691 - CVE-2026-7354 chromium-browser: angle: Out of bounds read and write in Angle
  • BZ - 2467315 - CVE-2026-7901 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2467337 - CVE-2026-7903 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2467362 - CVE-2026-7900 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2467399 - CVE-2026-7942 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2467432 - CVE-2026-7943 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2477634 - CVE-2026-8525 chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE
  • BZ - 2477635 - CVE-2026-8554 chromium-browser: angle: chromium-browser: Type Confusion in ANGLE
  • BZ - 2477663 - CVE-2026-8556 chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE
  • BZ - 2477670 - CVE-2026-8567 chromium-browser: angle: chromium-browser: Integer overflow in ANGLE
  • BZ - 2477687 - CVE-2026-8519 chromium-browser: angle: chromium-browser: Integer overflow in ANGLE
  • BZ - 2482977 - CVE-2026-9915 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2482984 - CVE-2026-9928 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2482986 - CVE-2026-9932 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2482987 - CVE-2026-9904 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2482995 - CVE-2026-10018 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2482997 - CVE-2026-9879 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2482999 - CVE-2026-9899 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483000 - CVE-2026-9940 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2483001 - CVE-2026-9925 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483007 - CVE-2026-9965 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2483011 - CVE-2026-9926 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2483012 - CVE-2026-9877 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483013 - CVE-2026-9927 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483014 - CVE-2026-9946 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483015 - CVE-2026-9999 chromium-browser: angle: Inappropriate implementation in ANGLE
  • BZ - 2483016 - CVE-2026-9882 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2483018 - CVE-2026-9910 chromium-browser: angle: Out of bounds memory access in ANGLE
  • BZ - 2483027 - CVE-2026-9908 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2483028 - CVE-2026-9924 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2483036 - CVE-2026-9944 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2483039 - CVE-2026-9953 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2483041 - CVE-2026-9975 chromium-browser: angle: Out of bounds read and write in ANGLE
  • BZ - 2483042 - CVE-2026-9982 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2483049 - CVE-2026-9914 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2483057 - CVE-2026-9941 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483058 - CVE-2026-10019 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2483059 - CVE-2026-9878 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483060 - CVE-2026-9901 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2483067 - CVE-2026-9900 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2483068 - CVE-2026-9969 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2483080 - CVE-2026-9935 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2483083 - CVE-2026-9911 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2483088 - CVE-2026-9913 chromium-browser: angle: Inappropriate implementation in ANGLE
  • BZ - 2483101 - CVE-2026-9942 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2483111 - CVE-2026-9916 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2484968 - CVE-2026-11113 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2484974 - CVE-2026-10889 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2484977 - CVE-2026-10994 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485007 - CVE-2026-11088 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2485037 - CVE-2026-10919 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2485042 - CVE-2026-10999 chromium-browser: angle: Out of bounds memory access in ANGLE
  • BZ - 2485056 - CVE-2026-11111 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485060 - CVE-2026-10955 chromium-browser: angle: Type Confusion in ANGLE
  • BZ - 2485064 - CVE-2026-10974 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2485072 - CVE-2026-11104 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485077 - CVE-2026-11087 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485100 - CVE-2026-11191 chromium-browser: angle: Out of bounds memory access in ANGLE
  • BZ - 2485123 - CVE-2026-11055 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2485126 - CVE-2026-10881 chromium-browser: angle: Out of bounds read and write in ANGLE
  • BZ - 2485145 - CVE-2026-10930 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485150 - CVE-2026-11005 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485153 - CVE-2026-10907 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2485155 - CVE-2026-11004 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485161 - CVE-2026-11040 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2485185 - CVE-2026-10929 chromium-browser: angle: Heap buffer overflow in ANGLE
  • BZ - 2485188 - CVE-2026-10913 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2485204 - CVE-2026-11090 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485214 - CVE-2026-11268 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485217 - CVE-2026-11044 chromium-browser: angle: Integer overflow in ANGLE
  • BZ - 2485231 - CVE-2026-11065 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2485237 - CVE-2026-10883 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2485253 - CVE-2026-11110 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485263 - CVE-2026-11043 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2485275 - CVE-2026-11123 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485292 - CVE-2026-11109 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485299 - CVE-2026-10914 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2485300 - CVE-2026-11138 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485303 - CVE-2026-11051 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485306 - CVE-2026-11061 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485319 - CVE-2026-10979 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2485322 - CVE-2026-11137 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2485342 - CVE-2026-11066 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2495510 - CVE-2026-14044 chromium-browser: angle: Use after free in ANGLE
  • BZ - 2495520 - CVE-2026-13780 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2495603 - CVE-2026-14125 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2495632 - CVE-2026-13859 chromium-browser: angle: Inappropriate implementation in ANGLE
  • BZ - 2495688 - CVE-2026-13833 chromium-browser: angle: Uninitialized Use in ANGLE
  • BZ - 2495701 - CVE-2026-13834 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2495718 - CVE-2026-14152 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2495732 - CVE-2026-13883 chromium-browser: angle: Type Confusion in ANGLE
  • BZ - 2495747 - CVE-2026-13877 chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
  • BZ - 2495770 - CVE-2026-13975 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2495802 - CVE-2026-13819 chromium-browser: angle: Out of bounds read in ANGLE
  • BZ - 2496258 - CVE-2026-14400 chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE
  • BZ - 2496271 - CVE-2026-14396 chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE
  • BZ - 2496273 - CVE-2026-14401 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2496274 - CVE-2026-14385 chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE
  • BZ - 2496277 - CVE-2026-14390 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2496280 - CVE-2026-14388 chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE
  • BZ - 2496286 - CVE-2026-14425 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2496291 - CVE-2026-14397 chromium-browser: angle: Out of bounds write in ANGLE
  • BZ - 2496294 - CVE-2026-14398 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2496295 - CVE-2026-14418 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2496296 - CVE-2026-14382 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2496297 - CVE-2026-14391 chromium-browser: angle: chromium-browser: Integer overflow in ANGLE
  • BZ - 2496301 - CVE-2026-14384 chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE
  • BZ - 2496302 - CVE-2026-14402 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2496305 - CVE-2026-14413 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2496309 - CVE-2026-14411 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2496310 - CVE-2026-14386 chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE
  • BZ - 2496312 - CVE-2026-14412 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2498347 - CVE-2026-15109 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2505974 - CVE-2026-16413 chromium-browser: angle: Chromium: Sandbox escape via out-of-bounds write in ANGLE
  • BZ - 2505976 - CVE-2026-16419 chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access
  • BZ - 2508694 - CVE-2026-17832 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2508701 - CVE-2026-17683 chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE
  • BZ - 2508707 - CVE-2026-17718 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2508713 - CVE-2026-17721 chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE
  • BZ - 2508716 - CVE-2026-17676 chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE
  • BZ - 2508724 - CVE-2026-17675 chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE
  • BZ - 2508735 - CVE-2026-17847 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2508739 - CVE-2026-17811 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2508762 - CVE-2026-17801 chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE
  • BZ - 2508767 - CVE-2026-17667 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2508778 - CVE-2026-17704 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2508795 - CVE-2026-17750 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2508807 - CVE-2026-17691 chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE
  • BZ - 2508812 - CVE-2026-17701 chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE
  • BZ - 2508833 - CVE-2026-17717 chromium-browser: angle: chromium-browser: Integer overflow in ANGLE
  • BZ - 2508836 - CVE-2026-17678 chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE
  • BZ - 2508849 - CVE-2026-17687 chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE
  • BZ - 2508852 - CVE-2026-17668 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2508883 - CVE-2026-17695 chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE
  • BZ - 2508895 - CVE-2026-17740 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2508906 - CVE-2026-17655 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2508951 - CVE-2026-17790 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2508966 - CVE-2026-17891 chromium-browser: angle: chromium-browser: Use after free in ANGLE
  • BZ - 2508971 - CVE-2026-17677 chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE
  • BZ - 2508975 - CVE-2026-17682 chromium-browser: angle: chromium-browser: Integer overflow in ANGLE
  • BZ - 2508979 - CVE-2026-17671 chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
  • BZ - 2508982 - CVE-2026-17714 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2508983 - CVE-2026-17785 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2509003 - CVE-2026-17697 chromium-browser: angle: chromium-browser: Type Confusion in ANGLE
  • BZ - 2509006 - CVE-2026-17689 chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  • BZ - 2512296 - CVE-2026-19157 chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android
  • BZ - 2518265 - CVE-2026-76046 ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page
  • BZ - 2520315 - CVE-2026-28984 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2520316 - CVE-2026-43804 webkitgtk: Visiting a website may lead to an app denial-of-service
  • BZ - 2520317 - CVE-2026-64713 webkitgtk: Websites may know if the user has visited a given link
  • BZ - 2520319 - CVE-2026-64728 webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy
  • BZ - 2520321 - CVE-2026-64730 webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing
  • BZ - 2520322 - CVE-2026-64757 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2520323 - CVE-2026-64783 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2521858 - CVE-2026-78376 webkitgtk: use-after-free of JSCValue function parameters
  • BZ - 2523795 - CVE-2026-78989 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
  • BZ - 2523835 - CVE-2026-79149 ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability
  • BZ - 2523850 - CVE-2026-79138 chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE
  • BZ - 2523858 - CVE-2026-78905 chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML
  • BZ - 2523859 - CVE-2026-79120 chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource
  • BZ - 2523865 - CVE-2026-79118 chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE
  • BZ - 2523872 - CVE-2026-79230 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation
  • BZ - 2523875 - CVE-2026-78904 chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page
  • BZ - 2523893 - CVE-2026-79240 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write
  • BZ - 2523917 - CVE-2026-79019 chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page
  • BZ - 2523926 - CVE-2026-79270 chromium-browser: angle: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE
  • BZ - 2523942 - CVE-2026-79275 chromium-browser: angle: ANGLE: Arbitrary code execution via use after free
  • BZ - 2523950 - CVE-2026-78978 chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page
  • BZ - 2523998 - CVE-2026-78965 chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource
  • BZ - 2524034 - CVE-2026-79188 chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page
  • BZ - 2524044 - CVE-2026-79043 chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page
  • BZ - 2524048 - CVE-2026-79282 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
  • BZ - 2524055 - CVE-2026-79229 chromium-browser: angle: Chromium: Information disclosure via uninitialized resource in ANGLE
  • BZ - 2524057 - CVE-2026-79131 chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE
  • BZ - 2524059 - CVE-2026-79269 chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE
  • BZ - 2524066 - CVE-2026-79127 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write
  • BZ - 2524082 - CVE-2026-79189 chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page
  • BZ - 2524088 - CVE-2026-79142 chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page
  • BZ - 2524091 - CVE-2026-79048 chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page
  • BZ - 2524096 - CVE-2026-79285 chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource
  • BZ - 2524102 - CVE-2026-79130 chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page
  • BZ - 2524111 - CVE-2026-78906 chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing
  • BZ - 2524566 - CVE-2026-43795 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524567 - CVE-2026-64715 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  • BZ - 2524568 - CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524569 - CVE-2026-64778 webkitgtk: Visiting a maliciously crafted website may leak sensitive data
  • BZ - 2524570 - CVE-2026-64779 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524571 - CVE-2026-64780 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524573 - CVE-2026-64782 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524574 - CVE-2026-64784 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524575 - CVE-2026-65331 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524576 - CVE-2026-65332 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524577 - CVE-2026-65333 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524578 - CVE-2026-65334 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524579 - CVE-2026-65335 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524580 - CVE-2026-65336 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524581 - CVE-2026-65337 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524582 - CVE-2026-65338 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524583 - CVE-2026-65340 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2524584 - CVE-2026-65341 webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  • BZ - 2524585 - CVE-2026-65351 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  • BZ - 2526490 - CVE-2026-83596 webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature
  • BZ - 2535531 - CVE-2026-84635 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination
  • BZ - 2535532 - CVE-2026-64753 webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

CVEs

  • CVE-2024-7532
  • CVE-2025-8901
  • CVE-2025-9478
  • CVE-2025-10502
  • CVE-2026-0908
  • CVE-2026-3536
  • CVE-2026-4448
  • CVE-2026-4452
  • CVE-2026-4464
  • CVE-2026-5275
  • CVE-2026-5277
  • CVE-2026-5283
  • CVE-2026-5868
  • CVE-2026-5879
  • CVE-2026-6296
  • CVE-2026-7340
  • CVE-2026-7354
  • CVE-2026-7359
  • CVE-2026-7900
  • CVE-2026-7901
  • CVE-2026-7903
  • CVE-2026-7942
  • CVE-2026-7943
  • CVE-2026-8519
  • CVE-2026-8525
  • CVE-2026-8554
  • CVE-2026-8556
  • CVE-2026-8567
  • CVE-2026-9877
  • CVE-2026-9878
  • CVE-2026-9879
  • CVE-2026-9882
  • CVE-2026-9899
  • CVE-2026-9900
  • CVE-2026-9901
  • CVE-2026-9904
  • CVE-2026-9908
  • CVE-2026-9910
  • CVE-2026-9911
  • CVE-2026-9913
  • CVE-2026-9914
  • CVE-2026-9915
  • CVE-2026-9916
  • CVE-2026-9924
  • CVE-2026-9925
  • CVE-2026-9926
  • CVE-2026-9927
  • CVE-2026-9928
  • CVE-2026-9932
  • CVE-2026-9935
  • CVE-2026-9940
  • CVE-2026-9941
  • CVE-2026-9942
  • CVE-2026-9944
  • CVE-2026-9946
  • CVE-2026-9953
  • CVE-2026-9965
  • CVE-2026-9969
  • CVE-2026-9975
  • CVE-2026-9982
  • CVE-2026-9999
  • CVE-2026-10018
  • CVE-2026-10019
  • CVE-2026-10881
  • CVE-2026-10883
  • CVE-2026-10889
  • CVE-2026-10907
  • CVE-2026-10913
  • CVE-2026-10914
  • CVE-2026-10919
  • CVE-2026-10929
  • CVE-2026-10930
  • CVE-2026-10955
  • CVE-2026-10974
  • CVE-2026-10979
  • CVE-2026-10994
  • CVE-2026-10999
  • CVE-2026-11004
  • CVE-2026-11005
  • CVE-2026-11040
  • CVE-2026-11043
  • CVE-2026-11044
  • CVE-2026-11051
  • CVE-2026-11055
  • CVE-2026-11061
  • CVE-2026-11065
  • CVE-2026-11066
  • CVE-2026-11087
  • CVE-2026-11088
  • CVE-2026-11090
  • CVE-2026-11104
  • CVE-2026-11109
  • CVE-2026-11110
  • CVE-2026-11111
  • CVE-2026-11113
  • CVE-2026-11123
  • CVE-2026-11137
  • CVE-2026-11138
  • CVE-2026-11191
  • CVE-2026-11268
  • CVE-2026-13780
  • CVE-2026-13819
  • CVE-2026-13833
  • CVE-2026-13834
  • CVE-2026-13859
  • CVE-2026-13877
  • CVE-2026-13883
  • CVE-2026-13975
  • CVE-2026-14044
  • CVE-2026-14125
  • CVE-2026-14152
  • CVE-2026-14382
  • CVE-2026-14384
  • CVE-2026-14385
  • CVE-2026-14386
  • CVE-2026-14388
  • CVE-2026-14390
  • CVE-2026-14391
  • CVE-2026-14396
  • CVE-2026-14397
  • CVE-2026-14398
  • CVE-2026-14400
  • CVE-2026-14401
  • CVE-2026-14402
  • CVE-2026-14411
  • CVE-2026-14412
  • CVE-2026-14413
  • CVE-2026-14418
  • CVE-2026-14425
  • CVE-2026-15109
  • CVE-2026-16413
  • CVE-2026-16419
  • CVE-2026-17655
  • CVE-2026-17667
  • CVE-2026-17668
  • CVE-2026-17671
  • CVE-2026-17675
  • CVE-2026-17676
  • CVE-2026-17677
  • CVE-2026-17678
  • CVE-2026-17682
  • CVE-2026-17683
  • CVE-2026-17687
  • CVE-2026-17689
  • CVE-2026-17691
  • CVE-2026-17695
  • CVE-2026-17697
  • CVE-2026-17701
  • CVE-2026-17704
  • CVE-2026-17714
  • CVE-2026-17717
  • CVE-2026-17718
  • CVE-2026-17721
  • CVE-2026-17740
  • CVE-2026-17750
  • CVE-2026-17785
  • CVE-2026-17790
  • CVE-2026-17801
  • CVE-2026-17811
  • CVE-2026-17832
  • CVE-2026-17847
  • CVE-2026-17891
  • CVE-2026-19157
  • CVE-2026-28984
  • CVE-2026-43795
  • CVE-2026-43804
  • CVE-2026-64713
  • CVE-2026-64715
  • CVE-2026-64718
  • CVE-2026-64728
  • CVE-2026-64730
  • CVE-2026-64753
  • CVE-2026-64757
  • CVE-2026-64778
  • CVE-2026-64779
  • CVE-2026-64780
  • CVE-2026-64782
  • CVE-2026-64783
  • CVE-2026-64784
  • CVE-2026-65331
  • CVE-2026-65332
  • CVE-2026-65333
  • CVE-2026-65334
  • CVE-2026-65335
  • CVE-2026-65336
  • CVE-2026-65337
  • CVE-2026-65338
  • CVE-2026-65340
  • CVE-2026-65341
  • CVE-2026-65351
  • CVE-2026-76046
  • CVE-2026-78376
  • CVE-2026-78904
  • CVE-2026-78905
  • CVE-2026-78906
  • CVE-2026-78965
  • CVE-2026-78978
  • CVE-2026-78989
  • CVE-2026-79019
  • CVE-2026-79043
  • CVE-2026-79048
  • CVE-2026-79118
  • CVE-2026-79120
  • CVE-2026-79127
  • CVE-2026-79130
  • CVE-2026-79131
  • CVE-2026-79138
  • CVE-2026-79142
  • CVE-2026-79149
  • CVE-2026-79188
  • CVE-2026-79189
  • CVE-2026-79229
  • CVE-2026-79230
  • CVE-2026-79240
  • CVE-2026-79269
  • CVE-2026-79270
  • CVE-2026-79275
  • CVE-2026-79282
  • CVE-2026-79285
  • CVE-2026-83596
  • CVE-2026-84635

References

  • https://access.redhat.com/security/updates/classification/#critical
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
webkitgtk4-2.54.0-1.el7_9.src.rpm SHA-256: 463173b50b2a2440d234f76d462ce176a872f231d44ba8422704d039f8719a8e
x86_64
webkitgtk4-2.54.0-1.el7_9.x86_64.rpm SHA-256: edc751e906c86a2eebbbab149f2c75337e4cfe1070b74b834f3df96b6681efed
webkitgtk4-debuginfo-2.54.0-1.el7_9.x86_64.rpm SHA-256: 5619cbe9d53082eed1617f5e77e9366930f6bbe4769d4b0e7b85c6e8e4ee0dea
webkitgtk4-devel-2.54.0-1.el7_9.x86_64.rpm SHA-256: a33694a88080667025ff95dc2c0aefa807f5b81d3809014cb473ed2c3545f85b
webkitgtk4-doc-2.54.0-1.el7_9.noarch.rpm SHA-256: 8bd88d440ea78c9576a92e787cde3c77a4914f12be86413a73ffb8958768e74f
webkitgtk4-jsc-2.54.0-1.el7_9.x86_64.rpm SHA-256: 4c0931c9cda1b938681463e78bb45ee6c2e126dc9118051662afe2f657971895
webkitgtk4-jsc-devel-2.54.0-1.el7_9.x86_64.rpm SHA-256: 8d27d8e67d79a617ec4cca5816e84842e43bf46eca5e3c2263bab7c4d99bcdce

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
webkitgtk4-2.54.0-1.el7_9.src.rpm SHA-256: 463173b50b2a2440d234f76d462ce176a872f231d44ba8422704d039f8719a8e
s390x
webkitgtk4-2.54.0-1.el7_9.s390x.rpm SHA-256: d44e000bb9deaa66669507a0c028aaef3706f70e04c89d3ded0c50f817660556
webkitgtk4-debuginfo-2.54.0-1.el7_9.s390x.rpm SHA-256: 9665903fc05dbaf81a7f21316b6a5476a8d9889c4ad9e9814722cf3e54006f15
webkitgtk4-debuginfo-2.54.0-1.el7_9.s390x.rpm SHA-256: 9665903fc05dbaf81a7f21316b6a5476a8d9889c4ad9e9814722cf3e54006f15
webkitgtk4-devel-2.54.0-1.el7_9.s390x.rpm SHA-256: 8c6c59c0473ef4ccecc52d87ff805d163b7a8b115b88a983d86e5e2bc6ddf07d
webkitgtk4-doc-2.54.0-1.el7_9.noarch.rpm SHA-256: 8bd88d440ea78c9576a92e787cde3c77a4914f12be86413a73ffb8958768e74f
webkitgtk4-jsc-2.54.0-1.el7_9.s390x.rpm SHA-256: 1404fbaa92802ad4b127f45ecdd09700da87171ad268f2681bbdea7c48068bab
webkitgtk4-jsc-devel-2.54.0-1.el7_9.s390x.rpm SHA-256: 07854ece59d74b8170f447bef6303d3a175015a41b55933c4679bb4f466f1ae0

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
webkitgtk4-2.54.0-1.el7_9.src.rpm SHA-256: 463173b50b2a2440d234f76d462ce176a872f231d44ba8422704d039f8719a8e
ppc64
webkitgtk4-doc-2.54.0-1.el7_9.noarch.rpm SHA-256: 8bd88d440ea78c9576a92e787cde3c77a4914f12be86413a73ffb8958768e74f

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
webkitgtk4-2.54.0-1.el7_9.src.rpm SHA-256: 463173b50b2a2440d234f76d462ce176a872f231d44ba8422704d039f8719a8e
ppc64le
webkitgtk4-2.54.0-1.el7_9.ppc64le.rpm SHA-256: 145c56abd3379edc1d8a4f65b4e8f97c5becb153bc6b5b07005e434d3365cf27
webkitgtk4-debuginfo-2.54.0-1.el7_9.ppc64le.rpm SHA-256: b95e68a560095dfdb5e41a3c1cee02f67107eeda3226ccace2169e6df3cc1be3
webkitgtk4-devel-2.54.0-1.el7_9.ppc64le.rpm SHA-256: e50e46e872daaaaf19c5a894ac7f392434037aebd67c33451311aa01853ab41b
webkitgtk4-doc-2.54.0-1.el7_9.noarch.rpm SHA-256: 8bd88d440ea78c9576a92e787cde3c77a4914f12be86413a73ffb8958768e74f
webkitgtk4-jsc-2.54.0-1.el7_9.ppc64le.rpm SHA-256: eed360a9b3217f9fa62c62ff2699b13b924b0b9e53cbb87e3f9b561d525acce0
webkitgtk4-jsc-devel-2.54.0-1.el7_9.ppc64le.rpm SHA-256: 1d6f214df39b26412cfd58977184fd5f442ff5cd7004e96efa1f5d52ac89731e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility